_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0xc78}, @device_b, @device_b, @device_b, {0xa, 0x5}, @device_b}, @a_msdu=[{@broadcast, @device_a, 0x47, "bb4513fc384845d555ae46148c4e64ca4a1cd4c682a0b2fc340719d25982b14b7b5bf0e22fe8b521ca0549617e177a2a8c1f9e26aa9d09350755a3fd9a67fcf965aedbb5dd04fe"}, {@broadcast, @broadcast, 0xf0, "8eb2629baa5d8f2450327a55b223d1eeca58b6f2d851f43bcbc156ebef2bed8d43cfb04b82d5112e3221b0d0e4632d3e89e7ebbff7ce991a7ca2700789aa669db6a883be7959070eda54df06bea076380b1c5c6b9d0e8fa005395b118775b02e139d3d44687ab3e6c6f26b35c48ebf35c92fac101a2e5b1c02afb8c57051f1dc4e04535a3918f7645c37a8e2cb556d9fe3884522c975fa57425b42da154f0652e00c2b77cbc5d1aa14816246e5b29e8932a6d488ac3701bdff571de111d10a7fc03f86caee38ad71626c3d27df84a497e51492bdeb37993b8f761cadd2134e6dbf750379a4439593acd1685a9e932fb0"}, {@broadcast, @broadcast, 0x5e, "cccf8b3a461c9ba0844742f6b9d3d4e12e8e6867e59e8879665bb71169730e557087822897126925c49d8f282d08686a48bf4a7c3fe26a702ce065af578976cde0cb725540bfde54a581157a8c1e97d19a26505fe55a529a6a89a3ece8d2"}]}, 0x1e2) [ 2920.503322][ T9067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2920.540308][ T9070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2920.559483][ T9072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2920.576030][ T9071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2920.589567][ T9070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:57 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x3000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2920.750087][ T9074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:57 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x18000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:51:57 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0xc78}, @device_b, @device_b, @device_b, {0xa, 0x5}, @device_b}, @a_msdu=[{@broadcast, @device_a, 0x47, "bb4513fc384845d555ae46148c4e64ca4a1cd4c682a0b2fc340719d25982b14b7b5bf0e22fe8b521ca0549617e177a2a8c1f9e26aa9d09350755a3fd9a67fcf965aedbb5dd04fe"}, {@broadcast, @broadcast, 0xf0, "8eb2629baa5d8f2450327a55b223d1eeca58b6f2d851f43bcbc156ebef2bed8d43cfb04b82d5112e3221b0d0e4632d3e89e7ebbff7ce991a7ca2700789aa669db6a883be7959070eda54df06bea076380b1c5c6b9d0e8fa005395b118775b02e139d3d44687ab3e6c6f26b35c48ebf35c92fac101a2e5b1c02afb8c57051f1dc4e04535a3918f7645c37a8e2cb556d9fe3884522c975fa57425b42da154f0652e00c2b77cbc5d1aa14816246e5b29e8932a6d488ac3701bdff571de111d10a7fc03f86caee38ad71626c3d27df84a497e51492bdeb37993b8f761cadd2134e6dbf750379a4439593acd1685a9e932fb0"}, {@broadcast, @broadcast, 0x5e, "cccf8b3a461c9ba0844742f6b9d3d4e12e8e6867e59e8879665bb71169730e557087822897126925c49d8f282d08686a48bf4a7c3fe26a702ce065af578976cde0cb725540bfde54a581157a8c1e97d19a26505fe55a529a6a89a3ece8d2"}]}, 0x1e2) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0xc78}, @device_b, @device_b, @device_b, {0xa, 0x5}, @device_b}, @a_msdu=[{@broadcast, @device_a, 0x47, "bb4513fc384845d555ae46148c4e64ca4a1cd4c682a0b2fc340719d25982b14b7b5bf0e22fe8b521ca0549617e177a2a8c1f9e26aa9d09350755a3fd9a67fcf965aedbb5dd04fe"}, {@broadcast, @broadcast, 0xf0, "8eb2629baa5d8f2450327a55b223d1eeca58b6f2d851f43bcbc156ebef2bed8d43cfb04b82d5112e3221b0d0e4632d3e89e7ebbff7ce991a7ca2700789aa669db6a883be7959070eda54df06bea076380b1c5c6b9d0e8fa005395b118775b02e139d3d44687ab3e6c6f26b35c48ebf35c92fac101a2e5b1c02afb8c57051f1dc4e04535a3918f7645c37a8e2cb556d9fe3884522c975fa57425b42da154f0652e00c2b77cbc5d1aa14816246e5b29e8932a6d488ac3701bdff571de111d10a7fc03f86caee38ad71626c3d27df84a497e51492bdeb37993b8f761cadd2134e6dbf750379a4439593acd1685a9e932fb0"}, {@broadcast, @broadcast, 0x5e, "cccf8b3a461c9ba0844742f6b9d3d4e12e8e6867e59e8879665bb71169730e557087822897126925c49d8f282d08686a48bf4a7c3fe26a702ce065af578976cde0cb725540bfde54a581157a8c1e97d19a26505fe55a529a6a89a3ece8d2"}]}, 0x1e2) (async) [ 2920.923159][ T9076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2920.977256][ T9078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2921.000812][ T9078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:57 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x25, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:51:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:51:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r4 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2921.031460][ T9078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2921.049156][ T9079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:57 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x20000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2921.095948][ T9082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2921.129062][ T9080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2921.157647][ T9089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:51:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x5, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20000) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x20}, @random="b8e441992c71", @device_b, @device_a, {0x4, 0x2}}, {0xe, 0x0, 0x2, 0x0, 0x1}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_a, @broadcast, @initial, {0x3, 0x80}}, {0x7, 0x0, 0x2, 0x1, 0x52}}}, @ver_80211n={0x0, 0x5, 0x2, 0x2, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xf9, "ba790e075ca994dc70c6b0b02e444aca5d10cbb976239e74809ff63f7b13a70e7e66e798b26df716fd153a0511c5b4d2fa75de12484fd33e6af80c6ed60446d846fcaa19fe73910332d529a0effabd3b4262266cede677f3b2c85bdfa26d6f0769672706792891e1e66a2ab25da1b57bf8f5c76609318728ecc9f8d95ff3446e90feefe9752a496ff6b511576c5dc8b283c1ba5eb76ca553ada205aee8a47b253881f999ec085f7a226a410f2b02339fb8d8a92ef894ba6723ee612025c37e0fe925a6db650e594b3fa8ced8caf2640fc8cc6a7df4c91fc28628f9b64e35a0f9fa566498290addace23abd4edecf23dbd07c7b6add1cdced15"}, {@device_b, @device_a, 0x2c, "7d33754450b5d2e188801f9defbb8d0bb11da25663486bfadff10c74452af48e35fbfed9339fb6d13dde7017"}, {@broadcast, @device_a, 0xc3, "1ae8010f6f2e4c9b8812c3ce0ecd789c22a3d3da45fb8cd6e40cedb4fb1647d1fb4bdaf44195d92ff7c64bad8f890b66667777793fe0f56f13f8e7b0b5421bd8599595ab2b2c4f9799abe012f0ccc9d7ad7f8119f081c77bd13907252626203a5c6a8721c02455da9e7e15fca63dd4f72d46124515a9184bc600651de2dedea99c95fe74c1a0d0c633537373dfd3384405ec83fa72d69f606573ac996e1b5e48d9a417b185183d575d0308f6de975e009214658a6b4eef5cae6e87ed53bb210de6cbc7"}]}, 0x250) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="889303000802110000000802110000000802110000007400ffffffffffff08ffc8b00800080211000001080211000000d7dc533b3be43900ad03a4114881d4d710397e5c9e2c3c7f464fdaa488f94a9a30746b46452bccef445a8f3c76279c777ed4a75c9563dcee0d7e0edf3afa4dae9e245f4be9ca338bf83b068892306acce4044f10975b2a82f8a971a2523dc72d859b2c06edf3daea3e821d00c7d26ac832590379d68971c7cae6b2a3778a76bcfd43740b5918bed4abec91683573e4df53f1579082996916f3531f01428e2c6bd892405957ed68adf88cfc3bd98b249c58eeaad9f14d9572ccc9472d367ad6fffdded791883b3e269ebe9f8399fdce40b072e4c6aa99f7bd5f596d497062943f46714c4dca39815a08bc763160e70f8b62f53ce3246f0516c11c10b363df39064c79d7e72115b8e87da60b54a03694427ce311659b188933ebc9533f47bde2106687562b2eb27aa93ebb525448cc8ede4702dcc5e5d85a7c19bfd882f5d5f46b02b81bc4f735e824310437e2b41c28dc17050afed462308e430aa47a96e7a0f24f0d9b6179bc1fc81221d67a0abd85867802da0e715e20ba4feed9a77694b2353a879ac3582a2ef3dc4473d03a49249c0c5da9cf5df382487898d46443dd07b6b40ed58fea17c7bbd1a2cd0bd434480641f3900846b3e81b1aadd1f893738a5cef01e0d01c7a8e9439af4a020ad8fbf60402ad44eabf30"], 0x207) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f00000002c0)=@ctrl_frame=@ba={{}, {0x4}, @device_b, @device_b, @compressed={{}, {0x6, 0x17}, "72a0b1de385c2e47"}}, 0x1c) [ 2921.431016][ T9096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:58 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x26, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:51:58 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x40030000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2921.480634][ T9096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2921.554853][ T9098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2921.580601][ T9099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2921.582254][ T9096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2921.606964][ T9102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2921.641097][ T9097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:51:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x5, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20000) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x20}, @random="b8e441992c71", @device_b, @device_a, {0x4, 0x2}}, {0xe, 0x0, 0x2, 0x0, 0x1}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_a, @broadcast, @initial, {0x3, 0x80}}, {0x7, 0x0, 0x2, 0x1, 0x52}}}, @ver_80211n={0x0, 0x5, 0x2, 0x2, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xf9, "ba790e075ca994dc70c6b0b02e444aca5d10cbb976239e74809ff63f7b13a70e7e66e798b26df716fd153a0511c5b4d2fa75de12484fd33e6af80c6ed60446d846fcaa19fe73910332d529a0effabd3b4262266cede677f3b2c85bdfa26d6f0769672706792891e1e66a2ab25da1b57bf8f5c76609318728ecc9f8d95ff3446e90feefe9752a496ff6b511576c5dc8b283c1ba5eb76ca553ada205aee8a47b253881f999ec085f7a226a410f2b02339fb8d8a92ef894ba6723ee612025c37e0fe925a6db650e594b3fa8ced8caf2640fc8cc6a7df4c91fc28628f9b64e35a0f9fa566498290addace23abd4edecf23dbd07c7b6add1cdced15"}, {@device_b, @device_a, 0x2c, "7d33754450b5d2e188801f9defbb8d0bb11da25663486bfadff10c74452af48e35fbfed9339fb6d13dde7017"}, {@broadcast, @device_a, 0xc3, "1ae8010f6f2e4c9b8812c3ce0ecd789c22a3d3da45fb8cd6e40cedb4fb1647d1fb4bdaf44195d92ff7c64bad8f890b66667777793fe0f56f13f8e7b0b5421bd8599595ab2b2c4f9799abe012f0ccc9d7ad7f8119f081c77bd13907252626203a5c6a8721c02455da9e7e15fca63dd4f72d46124515a9184bc600651de2dedea99c95fe74c1a0d0c633537373dfd3384405ec83fa72d69f606573ac996e1b5e48d9a417b185183d575d0308f6de975e009214658a6b4eef5cae6e87ed53bb210de6cbc7"}]}, 0x250) (rerun: 32) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="889303000802110000000802110000000802110000007400ffffffffffff08ffc8b00800080211000001080211000000d7dc533b3be43900ad03a4114881d4d710397e5c9e2c3c7f464fdaa488f94a9a30746b46452bccef445a8f3c76279c777ed4a75c9563dcee0d7e0edf3afa4dae9e245f4be9ca338bf83b068892306acce4044f10975b2a82f8a971a2523dc72d859b2c06edf3daea3e821d00c7d26ac832590379d68971c7cae6b2a3778a76bcfd43740b5918bed4abec91683573e4df53f1579082996916f3531f01428e2c6bd892405957ed68adf88cfc3bd98b249c58eeaad9f14d9572ccc9472d367ad6fffdded791883b3e269ebe9f8399fdce40b072e4c6aa99f7bd5f596d497062943f46714c4dca39815a08bc763160e70f8b62f53ce3246f0516c11c10b363df39064c79d7e72115b8e87da60b54a03694427ce311659b188933ebc9533f47bde2106687562b2eb27aa93ebb525448cc8ede4702dcc5e5d85a7c19bfd882f5d5f46b02b81bc4f735e824310437e2b41c28dc17050afed462308e430aa47a96e7a0f24f0d9b6179bc1fc81221d67a0abd85867802da0e715e20ba4feed9a77694b2353a879ac3582a2ef3dc4473d03a49249c0c5da9cf5df382487898d46443dd07b6b40ed58fea17c7bbd1a2cd0bd434480641f3900846b3e81b1aadd1f893738a5cef01e0d01c7a8e9439af4a020ad8fbf60402ad44eabf30"], 0x207) (async) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f00000002c0)=@ctrl_frame=@ba={{}, {0x4}, @device_b, @device_b, @compressed={{}, {0x6, 0x17}, "72a0b1de385c2e47"}}, 0x1c) 08:51:58 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xf0ffffffffffff, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2922.047056][ T9113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.053333][ T9115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.103336][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:58 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x20000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:51:58 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x27, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2922.149936][ T9113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.182112][ T9118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.187786][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.206901][ T9120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.223181][ T9117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.269425][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.297274][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.323932][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.357790][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:59 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x100000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2922.385964][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.423994][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.447824][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.465319][ T9122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.486588][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:59 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x28, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:51:59 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x20000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2922.527798][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.540217][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.551918][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.587730][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.619275][ T9124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2922.630439][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.669793][ T9126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.671920][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.699123][ T9123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.729219][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.766476][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:59 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x200000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2922.799953][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:59 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2922.854277][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.882324][ T9132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.893857][ T9110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.920309][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.932508][ T9134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.954817][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2922.981471][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.022137][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.049347][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:51:59 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x29, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2923.068005][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.084199][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.096274][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.108102][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.129470][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.140616][ T9136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.163618][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.175111][ T9135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.182322][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.213153][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:00 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x300000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2923.247540][T18319] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:52:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x5, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20000) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x20}, @random="b8e441992c71", @device_b, @device_a, {0x4, 0x2}}, {0xe, 0x0, 0x2, 0x0, 0x1}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_a, @broadcast, @initial, {0x3, 0x80}}, {0x7, 0x0, 0x2, 0x1, 0x52}}}, @ver_80211n={0x0, 0x5, 0x2, 0x2, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xf9, "ba790e075ca994dc70c6b0b02e444aca5d10cbb976239e74809ff63f7b13a70e7e66e798b26df716fd153a0511c5b4d2fa75de12484fd33e6af80c6ed60446d846fcaa19fe73910332d529a0effabd3b4262266cede677f3b2c85bdfa26d6f0769672706792891e1e66a2ab25da1b57bf8f5c76609318728ecc9f8d95ff3446e90feefe9752a496ff6b511576c5dc8b283c1ba5eb76ca553ada205aee8a47b253881f999ec085f7a226a410f2b02339fb8d8a92ef894ba6723ee612025c37e0fe925a6db650e594b3fa8ced8caf2640fc8cc6a7df4c91fc28628f9b64e35a0f9fa566498290addace23abd4edecf23dbd07c7b6add1cdced15"}, {@device_b, @device_a, 0x2c, "7d33754450b5d2e188801f9defbb8d0bb11da25663486bfadff10c74452af48e35fbfed9339fb6d13dde7017"}, {@broadcast, @device_a, 0xc3, "1ae8010f6f2e4c9b8812c3ce0ecd789c22a3d3da45fb8cd6e40cedb4fb1647d1fb4bdaf44195d92ff7c64bad8f890b66667777793fe0f56f13f8e7b0b5421bd8599595ab2b2c4f9799abe012f0ccc9d7ad7f8119f081c77bd13907252626203a5c6a8721c02455da9e7e15fca63dd4f72d46124515a9184bc600651de2dedea99c95fe74c1a0d0c633537373dfd3384405ec83fa72d69f606573ac996e1b5e48d9a417b185183d575d0308f6de975e009214658a6b4eef5cae6e87ed53bb210de6cbc7"}]}, 0x250) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="889303000802110000000802110000000802110000007400ffffffffffff08ffc8b00800080211000001080211000000d7dc533b3be43900ad03a4114881d4d710397e5c9e2c3c7f464fdaa488f94a9a30746b46452bccef445a8f3c76279c777ed4a75c9563dcee0d7e0edf3afa4dae9e245f4be9ca338bf83b068892306acce4044f10975b2a82f8a971a2523dc72d859b2c06edf3daea3e821d00c7d26ac832590379d68971c7cae6b2a3778a76bcfd43740b5918bed4abec91683573e4df53f1579082996916f3531f01428e2c6bd892405957ed68adf88cfc3bd98b249c58eeaad9f14d9572ccc9472d367ad6fffdded791883b3e269ebe9f8399fdce40b072e4c6aa99f7bd5f596d497062943f46714c4dca39815a08bc763160e70f8b62f53ce3246f0516c11c10b363df39064c79d7e72115b8e87da60b54a03694427ce311659b188933ebc9533f47bde2106687562b2eb27aa93ebb525448cc8ede4702dcc5e5d85a7c19bfd882f5d5f46b02b81bc4f735e824310437e2b41c28dc17050afed462308e430aa47a96e7a0f24f0d9b6179bc1fc81221d67a0abd85867802da0e715e20ba4feed9a77694b2353a879ac3582a2ef3dc4473d03a49249c0c5da9cf5df382487898d46443dd07b6b40ed58fea17c7bbd1a2cd0bd434480641f3900846b3e81b1aadd1f893738a5cef01e0d01c7a8e9439af4a020ad8fbf60402ad44eabf30"], 0x207) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f00000002c0)=@ctrl_frame=@ba={{}, {0x4}, @device_b, @device_b, @compressed={{}, {0x6, 0x17}, "72a0b1de385c2e47"}}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) (async) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x4c, 0x5, 0x6, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x20000) (async) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x20}, @random="b8e441992c71", @device_b, @device_a, {0x4, 0x2}}, {0xe, 0x0, 0x2, 0x0, 0x1}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_a, @broadcast, @initial, {0x3, 0x80}}, {0x7, 0x0, 0x2, 0x1, 0x52}}}, @ver_80211n={0x0, 0x5, 0x2, 0x2, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xf9, "ba790e075ca994dc70c6b0b02e444aca5d10cbb976239e74809ff63f7b13a70e7e66e798b26df716fd153a0511c5b4d2fa75de12484fd33e6af80c6ed60446d846fcaa19fe73910332d529a0effabd3b4262266cede677f3b2c85bdfa26d6f0769672706792891e1e66a2ab25da1b57bf8f5c76609318728ecc9f8d95ff3446e90feefe9752a496ff6b511576c5dc8b283c1ba5eb76ca553ada205aee8a47b253881f999ec085f7a226a410f2b02339fb8d8a92ef894ba6723ee612025c37e0fe925a6db650e594b3fa8ced8caf2640fc8cc6a7df4c91fc28628f9b64e35a0f9fa566498290addace23abd4edecf23dbd07c7b6add1cdced15"}, {@device_b, @device_a, 0x2c, "7d33754450b5d2e188801f9defbb8d0bb11da25663486bfadff10c74452af48e35fbfed9339fb6d13dde7017"}, {@broadcast, @device_a, 0xc3, "1ae8010f6f2e4c9b8812c3ce0ecd789c22a3d3da45fb8cd6e40cedb4fb1647d1fb4bdaf44195d92ff7c64bad8f890b66667777793fe0f56f13f8e7b0b5421bd8599595ab2b2c4f9799abe012f0ccc9d7ad7f8119f081c77bd13907252626203a5c6a8721c02455da9e7e15fca63dd4f72d46124515a9184bc600651de2dedea99c95fe74c1a0d0c633537373dfd3384405ec83fa72d69f606573ac996e1b5e48d9a417b185183d575d0308f6de975e009214658a6b4eef5cae6e87ed53bb210de6cbc7"}]}, 0x250) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x207) (async) syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f00000002c0)=@ctrl_frame=@ba={{}, {0x4}, @device_b, @device_b, @compressed={{}, {0x6, 0x17}, "72a0b1de385c2e47"}}, 0x1c) (async) 08:52:00 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2923.320615][ T9138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.357922][T18319] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2923.380746][ T9140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.439826][ T9142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:00 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x60, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2923.489043][ T9142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.525090][T18319] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2923.543937][ T9143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.558604][ T9145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.592230][ T9144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.603778][ T9142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2923.653713][ T9146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:00 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x400000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:00 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) [ 2923.694183][T18319] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2923.784220][ T9157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.880690][ T9159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2923.919294][T18319] device Zd left promiscuous mode [ 2924.814622][T18319] device hsr_slave_0 left promiscuous mode [ 2924.821084][T18319] device hsr_slave_1 left promiscuous mode [ 2924.827691][T18319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2924.835350][T18319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2924.845425][T18319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2924.853501][T18319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2924.861927][T18319] device bridge_slave_1 left promiscuous mode [ 2924.868347][T18319] bridge0: port 2(bridge_slave_1) entered disabled state [ 2924.876738][T18319] device bridge_slave_0 left promiscuous mode [ 2924.885703][T18319] bridge0: port 1(bridge_slave_0) entered disabled state [ 2924.898122][T18319] device veth1_macvtap left promiscuous mode [ 2924.908260][T18319] device veth0_macvtap left promiscuous mode [ 2924.914840][T18319] device veth1_vlan left promiscuous mode [ 2924.920635][T18319] device veth0_vlan left promiscuous mode [ 2925.054742][T18319] bond1 (unregistering): Released all slaves [ 2925.495164][T18319] team0 (unregistering): Port device team_slave_1 removed [ 2925.512422][T18319] team0 (unregistering): Port device team_slave_0 removed [ 2925.527151][T18319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2925.540493][T18319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2925.609261][T18319] bond0 (unregistering): Released all slaves [ 2926.304354][ T1213] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2926.314325][ T1213] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2926.323022][ T1213] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2926.331553][ T1213] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2926.339345][ T1213] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2926.348171][ T1213] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2926.543530][ T9211] chnl_net:caif_netlink_parms(): no params data found [ 2926.680373][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state [ 2926.696104][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 2926.716232][ T9211] device bridge_slave_0 entered promiscuous mode [ 2926.734568][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state [ 2926.741731][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state [ 2926.758654][ T9211] device bridge_slave_1 entered promiscuous mode [ 2926.816239][ T9211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2926.844147][ T9211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2926.919224][ T9211] team0: Port device team_slave_0 added [ 2926.928089][ T9211] team0: Port device team_slave_1 added [ 2926.956600][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2926.963655][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2927.012971][ T9211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2927.034988][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2927.042467][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2927.074280][ T9211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2927.135502][ T9211] device hsr_slave_0 entered promiscuous mode [ 2927.146770][ T9211] device hsr_slave_1 entered promiscuous mode [ 2927.330973][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state [ 2927.338131][ T9211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2927.404238][ T9211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2927.436971][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 2927.456466][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2927.479098][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2927.496982][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2927.516879][ T9211] 8021q: adding VLAN 0 to HW filter on device team0 [ 2927.537045][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2927.551800][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2927.561435][ T3678] bridge0: port 1(bridge_slave_0) entered blocking state [ 2927.568585][ T3678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2927.609268][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2927.637975][T13044] bridge0: port 2(bridge_slave_1) entered blocking state [ 2927.645138][T13044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2927.691113][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2927.704949][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2927.730760][ T9211] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2927.742462][ T9211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2927.755446][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2927.765941][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2927.774805][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2927.784394][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2927.793035][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2927.830780][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2927.840234][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2927.848101][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2927.867763][ T9211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2927.902740][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2927.912079][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2927.941721][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2927.951187][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2927.962341][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2927.970826][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2927.996274][ T9211] device veth0_vlan entered promiscuous mode [ 2928.028368][ T9211] device veth1_vlan entered promiscuous mode [ 2928.083848][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2928.092020][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2928.114107][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2928.132958][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2928.144873][ T9211] device veth0_macvtap entered promiscuous mode [ 2928.166146][ T9211] device veth1_macvtap entered promiscuous mode [ 2928.206100][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2928.233426][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2928.252894][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2928.303171][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2928.322965][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2928.342884][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2928.352713][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2928.382823][ T9186] Bluetooth: hci3: command 0x0409 tx timeout [ 2928.382888][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2928.412827][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2928.423495][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2928.435101][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2928.459455][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2928.480390][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2928.492670][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2928.514662][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2928.532934][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2928.553611][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2928.570664][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2928.584451][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2928.602001][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2928.614109][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2928.634105][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2928.641476][T30731] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2928.655308][T30731] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2928.663725][T30731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2928.672315][T30731] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2928.682004][T30731] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2928.690778][T30731] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2928.804112][ T6669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2928.812275][ T6669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2928.840335][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2928.865690][ T6669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2928.885430][ T6669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2928.909338][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2928.984848][ T9271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:06 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:06 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x2, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:06 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x500000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:06 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) [ 2929.336013][ T9293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2929.338934][ T9289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2929.357618][ T9296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2929.385934][ T9298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2929.410439][ T9291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:06 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) 08:52:06 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x600000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:06 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:06 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x3, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2929.742481][ T9310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2929.817744][ T9313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2929.853782][ T9317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2929.865099][ T9318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2929.893437][ T9315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2930.053946][T12003] Bluetooth: hci2: command 0x0406 tx timeout [ 2930.062422][T12003] Bluetooth: hci5: command 0x0406 tx timeout 08:52:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:07 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat2(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x2, &(0x7f0000000200)={0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f832529}}, './file0\x00'}) sendfile(0xffffffffffffffff, r3, &(0x7f00000001c0)=0x7, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300), &(0x7f0000000480)=@v3={0x3000000, [{0x5, 0x101}, {0xfffff4ac, 0x8}], r4}, 0x18, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000023c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000024c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) fstat(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000340)="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", 0x2000, &(0x7f00000028c0)={&(0x7f0000000000)={0x50, 0x0, 0x9, {0x7, 0x24, 0x7, 0x60001, 0x400, 0x971, 0x2, 0x101}}, &(0x7f0000000080)={0x18, 0x0, 0x2, {0x6f43}}, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x77d8}}, &(0x7f0000000100)={0x18, 0x0, 0x8, {0x1}}, &(0x7f0000000140)={0x18, 0x0, 0x6, {0x20}}, &(0x7f0000000180)={0x28, 0xfffffffffffffffe, 0x3, {{0xdbb4, 0x8000, 0x1, r2}}}, &(0x7f00000001c0)={0x60, 0x0, 0x5db848e8, {{0x8, 0xe, 0x2, 0x80000000, 0xe17, 0x7fffffff, 0x4, 0x80000001}}}, &(0x7f0000000240)={0x18, 0x0, 0x8, {0x101}}, &(0x7f0000000280)={0x11, 0x0, 0xfffffffffffff001, {'\x00'}}, &(0x7f00000002c0)={0x20, 0x0, 0xff, {0x0, 0x6}}, &(0x7f0000002340)={0x78, 0xffffffffffffffda, 0x0, {0xcd53ccc, 0x3, 0x0, {0x0, 0x1, 0x20, 0x31, 0xdac, 0x9, 0x5, 0x4, 0x5, 0x6000, 0x7, r4, 0xee00, 0x0, 0x101}}}, &(0x7f0000002540)={0x90, 0x0, 0x7f, {0x3, 0x3, 0x1000, 0x7, 0x1d1d, 0x2, {0x0, 0x10000, 0xfffffffffffff800, 0x8000000000000000, 0x0, 0x4, 0x8001, 0x5, 0x7, 0x8000, 0x1, r5, r6, 0x100, 0x7fff}}}, &(0x7f0000002600)={0x68, 0xffffffffffffffda, 0x9, [{0x5, 0x5, 0x6, 0xffffffc0, ']]@&}\\'}, {0x2, 0x8, 0x3, 0x800, '+#)'}, {0x2, 0x2, 0x0, 0x3}]}, &(0x7f0000002700)={0xb0, 0xfffffffffffffffe, 0x2, [{{0x3, 0x2, 0x3, 0x8000000000000001, 0x589d5e57, 0x20, {0x0, 0xedd, 0x0, 0x3f, 0x8000000000000000, 0x213, 0x0, 0x40, 0xa6e7, 0x6000, 0x9b6, 0xffffffffffffffff, r7, 0x8000, 0x5}}, {0x6, 0x0, 0x5, 0x7, ':,-+:'}}]}, &(0x7f00000027c0)={0xa0, 0x0, 0x6, {{0x1, 0x2, 0x5bb, 0x1, 0xdfb2, 0x3de0, {0x3, 0x1, 0x4, 0x8, 0x3, 0x3, 0x7f, 0x6, 0x0, 0x2adca8024618720e, 0x400, 0xee01, 0x0, 0x8, 0x7fff}}, {0x0, 0xd}}}, &(0x7f0000002880)={0x20, 0x0, 0x7, {0x400, 0x4, 0x3ff, 0xffff1816}}}) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) 08:52:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:07 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x700000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:07 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:07 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x4, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2930.399750][ T9346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2930.403579][ T9347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2930.426753][ T9343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2930.445408][ T9344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2930.456773][ T9262] Bluetooth: hci3: command 0x041b tx timeout [ 2930.464477][ T9337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:07 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat2(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x2, &(0x7f0000000200)={0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f832529}}, './file0\x00'}) sendfile(0xffffffffffffffff, r3, &(0x7f00000001c0)=0x7, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300), &(0x7f0000000480)=@v3={0x3000000, [{0x5, 0x101}, {0xfffff4ac, 0x8}], r4}, 0x18, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000023c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000024c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) fstat(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000340)="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", 0x2000, &(0x7f00000028c0)={&(0x7f0000000000)={0x50, 0x0, 0x9, {0x7, 0x24, 0x7, 0x60001, 0x400, 0x971, 0x2, 0x101}}, &(0x7f0000000080)={0x18, 0x0, 0x2, {0x6f43}}, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x77d8}}, &(0x7f0000000100)={0x18, 0x0, 0x8, {0x1}}, &(0x7f0000000140)={0x18, 0x0, 0x6, {0x20}}, &(0x7f0000000180)={0x28, 0xfffffffffffffffe, 0x3, {{0xdbb4, 0x8000, 0x1, r2}}}, &(0x7f00000001c0)={0x60, 0x0, 0x5db848e8, {{0x8, 0xe, 0x2, 0x80000000, 0xe17, 0x7fffffff, 0x4, 0x80000001}}}, &(0x7f0000000240)={0x18, 0x0, 0x8, {0x101}}, &(0x7f0000000280)={0x11, 0x0, 0xfffffffffffff001, {'\x00'}}, &(0x7f00000002c0)={0x20, 0x0, 0xff, {0x0, 0x6}}, &(0x7f0000002340)={0x78, 0xffffffffffffffda, 0x0, {0xcd53ccc, 0x3, 0x0, {0x0, 0x1, 0x20, 0x31, 0xdac, 0x9, 0x5, 0x4, 0x5, 0x6000, 0x7, r4, 0xee00, 0x0, 0x101}}}, &(0x7f0000002540)={0x90, 0x0, 0x7f, {0x3, 0x3, 0x1000, 0x7, 0x1d1d, 0x2, {0x0, 0x10000, 0xfffffffffffff800, 0x8000000000000000, 0x0, 0x4, 0x8001, 0x5, 0x7, 0x8000, 0x1, r5, r6, 0x100, 0x7fff}}}, &(0x7f0000002600)={0x68, 0xffffffffffffffda, 0x9, [{0x5, 0x5, 0x6, 0xffffffc0, ']]@&}\\'}, {0x2, 0x8, 0x3, 0x800, '+#)'}, {0x2, 0x2, 0x0, 0x3}]}, &(0x7f0000002700)={0xb0, 0xfffffffffffffffe, 0x2, [{{0x3, 0x2, 0x3, 0x8000000000000001, 0x589d5e57, 0x20, {0x0, 0xedd, 0x0, 0x3f, 0x8000000000000000, 0x213, 0x0, 0x40, 0xa6e7, 0x6000, 0x9b6, 0xffffffffffffffff, r7, 0x8000, 0x5}}, {0x6, 0x0, 0x5, 0x7, ':,-+:'}}]}, &(0x7f00000027c0)={0xa0, 0x0, 0x6, {{0x1, 0x2, 0x5bb, 0x1, 0xdfb2, 0x3de0, {0x3, 0x1, 0x4, 0x8, 0x3, 0x3, 0x7f, 0x6, 0x0, 0x2adca8024618720e, 0x400, 0xee01, 0x0, 0x8, 0x7fff}}, {0x0, 0xd}}}, &(0x7f0000002880)={0x20, 0x0, 0x7, {0x400, 0x4, 0x3ff, 0xffff1816}}}) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f0000000140)) (async) openat2(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) ptrace$setregset(0x4205, r2, 0x2, &(0x7f0000000200)={0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f832529}}, './file0\x00'}) (async) sendfile(0xffffffffffffffff, r3, &(0x7f00000001c0)=0x7, 0x8) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) (async) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300), &(0x7f0000000480)=@v3={0x3000000, [{0x5, 0x101}, {0xfffff4ac, 0x8}], r4}, 0x18, 0x1) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000023c0)={{{@in6=@dev, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000024c0)=0xe8) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) (async) fstat(0xffffffffffffffff, &(0x7f0000002680)) (async) syz_fuse_handle_req(r1, &(0x7f0000000340)="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", 0x2000, &(0x7f00000028c0)={&(0x7f0000000000)={0x50, 0x0, 0x9, {0x7, 0x24, 0x7, 0x60001, 0x400, 0x971, 0x2, 0x101}}, &(0x7f0000000080)={0x18, 0x0, 0x2, {0x6f43}}, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x77d8}}, &(0x7f0000000100)={0x18, 0x0, 0x8, {0x1}}, &(0x7f0000000140)={0x18, 0x0, 0x6, {0x20}}, &(0x7f0000000180)={0x28, 0xfffffffffffffffe, 0x3, {{0xdbb4, 0x8000, 0x1, r2}}}, &(0x7f00000001c0)={0x60, 0x0, 0x5db848e8, {{0x8, 0xe, 0x2, 0x80000000, 0xe17, 0x7fffffff, 0x4, 0x80000001}}}, &(0x7f0000000240)={0x18, 0x0, 0x8, {0x101}}, &(0x7f0000000280)={0x11, 0x0, 0xfffffffffffff001, {'\x00'}}, &(0x7f00000002c0)={0x20, 0x0, 0xff, {0x0, 0x6}}, &(0x7f0000002340)={0x78, 0xffffffffffffffda, 0x0, {0xcd53ccc, 0x3, 0x0, {0x0, 0x1, 0x20, 0x31, 0xdac, 0x9, 0x5, 0x4, 0x5, 0x6000, 0x7, r4, 0xee00, 0x0, 0x101}}}, &(0x7f0000002540)={0x90, 0x0, 0x7f, {0x3, 0x3, 0x1000, 0x7, 0x1d1d, 0x2, {0x0, 0x10000, 0xfffffffffffff800, 0x8000000000000000, 0x0, 0x4, 0x8001, 0x5, 0x7, 0x8000, 0x1, r5, r6, 0x100, 0x7fff}}}, &(0x7f0000002600)={0x68, 0xffffffffffffffda, 0x9, [{0x5, 0x5, 0x6, 0xffffffc0, ']]@&}\\'}, {0x2, 0x8, 0x3, 0x800, '+#)'}, {0x2, 0x2, 0x0, 0x3}]}, &(0x7f0000002700)={0xb0, 0xfffffffffffffffe, 0x2, [{{0x3, 0x2, 0x3, 0x8000000000000001, 0x589d5e57, 0x20, {0x0, 0xedd, 0x0, 0x3f, 0x8000000000000000, 0x213, 0x0, 0x40, 0xa6e7, 0x6000, 0x9b6, 0xffffffffffffffff, r7, 0x8000, 0x5}}, {0x6, 0x0, 0x5, 0x7, ':,-+:'}}]}, &(0x7f00000027c0)={0xa0, 0x0, 0x6, {{0x1, 0x2, 0x5bb, 0x1, 0xdfb2, 0x3de0, {0x3, 0x1, 0x4, 0x8, 0x3, 0x3, 0x7f, 0x6, 0x0, 0x2adca8024618720e, 0x400, 0xee01, 0x0, 0x8, 0x7fff}}, {0x0, 0xd}}}, &(0x7f0000002880)={0x20, 0x0, 0x7, {0x400, 0x4, 0x3ff, 0xffff1816}}}) (async) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) (async) 08:52:07 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x5, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:07 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:07 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x800000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2930.870891][ T9364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2930.941441][ T9369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2930.943927][ T9371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2930.973792][ T9387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2930.989028][ T9375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2930.993060][ T9388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:07 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat2(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$setregset(0x4205, r2, 0x2, &(0x7f0000000200)={0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1f832529}}, './file0\x00'}) sendfile(0xffffffffffffffff, r3, &(0x7f00000001c0)=0x7, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) setxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300), &(0x7f0000000480)=@v3={0x3000000, [{0x5, 0x101}, {0xfffff4ac, 0x8}], r4}, 0x18, 0x1) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000023c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000024c0)=0xe8) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) fstat(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000340)="b69635dde512164037305a078496a0a55b3c2ba78b748caf0c98eb1cd2c27061a2d5687c619ccee267c3638402f32594a86a2bbfa178f6d752045d3c4ed38c88ea1474a40bcea7b298e3a4336a304d43847aa1a760d4a77936de9a9dee3e44d1e03f99d6597d83df14ae8f7a955058e7f102770d958fc06ae004c4b44dab1f2a12fb4b490f39a425f61770d7f5d2be721621888940f12f7ce5ce5adf6500468b8adc066d6dac727b31244528b1c1b39b822467325351c3d36f0fe6239ac899ba07bab77a662e25c2a4c6182b1ff474282ec92935eabc1e5f15966b22749230de8b058dd5d375d9dd230729195ab6bcfe25d9f744d9247cd2788012a400b331f19165f078668836c13ed31f7cbb2d04a895b5187e61fc12119d6553801bccce9a3f5b5ce4eb9b6ccef2e70cb043185929e167a1a1dd5877a275a8b24d1a4353cd195c7b1c1cf5bf64e0187329ed40d55e4c43040c702f1dc86340b93744ff930b27c59f68f65f1b7bdc1e70b4d7a4b4aad6492b838aaf631498197046bf05ce9514a151871be6fe561d4d0c04d1e19c3916679271b172f7564689e9d54a419958845fc3c21804646a444a3d31edc36b3f6740eb0891f13e44fc8bcc689d937f30f584b942911dca0ef4761fac16478406ef9bf31353203eebafa623efe38ad8db259d5906f4910d0659ccf6835b93f3ae23e0faff66dc6eeaef2069f1ddfa150d60a59cbed4c2937386b4258abd5bfae161e1f49eddc845a23164cd6a98ecf58537e65c19eec6a040fc4121c8a90f60f28e8299ecf404ec503c7e28cbab5c3f806fb92faf487941fce17ed2c59078adfdf35bcd344b05f09f495884fca12ddb8cf58221ea1f876f54f8bd473dcde4a5ef48536c2adc820f2714c73b4377470556803ec68c1f5991cbd8fb9d723ae59a76003f61f30012bd505b7a8a5bd85d69874e8b0b9e3f58248f39eabc530698851ed225072496bf7e9a48dee72c6f32944c7e0016458615d153f38c0562b9f67a70326d914fd25187aa13b92a6d58367296013ae5034df8453402207d19c1a1fceffcae2699f8230df2d5b4ac5b84a21e7d8b294d68abd957a00f34491ab390969831c8d7ef0f989503826dd8bf535616019c185b5bcc028aea694a8fec5e0c14234f601b46d60c26b6d66863965adaeeebf71b576c62cde1105766988381675a645a66fd09d4c44bba7df423d279c1693f63e3d434bc81c62e7268d44029a5d671410e0082e632990cba4c3d630a9b7fe44ba53758c64951010f21777e5bd071e7bd22dfa3e597fc07748b49b7b68db2b3d37c5b7de9c0779e69cea3779caebcb6cb52987ccd5d2087d0f32200539aa4ade3728efd83b23b5ab9b993bed023dc6a96aa84a1f4ea2a696c63d2c567878b8f1284f4ad35d0a8a4f820bdfc4ef47088fd94ac9675444e8cbdebf5c85a5bfa814ec0703e9e5c8e513d13e5991eefe285bd7732df5aea1e542cdb9de6ae32c18b1deb0b690ddaa78a79a21aee07d85d059d902caf7b0aee3a908c39727737e83ac1a8670fd8e3137f82ccebbf294d8812ccf21bbe49d0b8d130c057757d9775bb09f625d2cb6838d26ea27ee12e73a3ca215782b1fc0224f79340d36d2c1f2b0d579e27ee498772954edb14e7736b8e0e66e4922c5cb2998d8037ec22da9a51e0a1edd1281c2694de864650d92f648ba50ea1b0a682d95fc0f6edcb45a5773ab138ec3db7043cb118451831efe5f889ed00509c6a7f92d94f21f4fc0a06d67a5da95c37a4fb86b503650ad60dab01fe8bce7378f4c0f220031f827b965ab87bbe130932ebee9ad487777a3efc61e079cda655e407fe1cf7d72f243f54cbb23b6185d4bcb8f52c3e11e0313d57dd29a3f4f9af3addbb9485ba43a40f7225796e5e40829379a7c13ff05b0ea5fb147326e5e9e7426033e5d6e9342f286f6247cb143c1a5bc698a171c7067adb0b051430a784e1e6356b616bbb404661d13844753fe37db24fb487ec8d42222c317a41437a6e73e5fdfb6f3d49fdb2716fc16156852abe51f4f93ec3f0f318ba6e8a35ffab479ef6a6ec68e111d2a919ca9a99a3ee89e3d56d274908d229ca2df5ea7be87cc0396f23e99d496c64827b3b8b65dcd49238a863b3d194e871997258db77be378088ff1d3bf78d298eaec28c9b5db4d10729f161b5379189d2c3fa1744166f4611ac8600480f22a57a997b9196058d5d3f345368b93976b090c3e31078a81dd10c0a75b0a31f95aa75b3f7a5df69b8b678ed5c70ad63397eda01a15d6695026cf3ec1809bef64dfddb50d700560ef575a55926e0bdc13613fc19c9475e44cd888b6ef9b6b1b7f59da2a461893ec7a04d92904bf30f12ece55d5a3569a9954a13d0102c2e5aa2c27d1a7b94a369627c0423d683bde10fefc016e9729abd4a732278457d9bc5b210f4b14b8d3805fff109a26c71c20e253b4fb3508a473d3d64c5460c95d16f4c419b12fc385a141689401be728b8aa5c3397477969eea6197343b9256404164d5e15205dbb4df22c585f2551b01c43cfd6146fdf87f2f12603c372b8cf743b14f887779d089f8f7fc8a8334e638a3cfa2867bdab88608a20f28daddc9fd3fb928998a58ccee9e6f206c62e44ae70375822fbb54bc0a2a7ddf48629f1e21d63ce6758005598fb16e254167626d807a3937dc4771a4d38e0d0db9bcb8a6024fcb49866373c6e95fa9aa6535c4727efe2efc8d6cfe0fb3eb2e2bb99fccd6d068895cc308a6ccc5be218f48a956489d4ef99921d8bc076a817904865eb6537b6a3b7f823ef3e58d4e2885eaf3dd40c163d3679166e8c57934c36a675ea89a1dd247ae07b961522c28cb37d4842f95b49595bd983bd3f2eb29c5790f8b400e52428e7a6304ab9e82b50fd9f9d020b195e43d93d522ddacb4683f1d89ffe1bf89d8524e1a8bd89a9218b94148da74725f7bd43e72152a592f31b78fb88e1a2714d2886668cea39e714c566f485c6553f53a48f7bfa3118e5a961a42a864f2d61e968c481b1a977d85b005caefcb01b529754f458391cfb6ddc11852965c2fd262016c538f85df3ace33e6e2d1ad01ef31a5e7365292a1b4ce63e176cb25dd2f8ca0e789a3e89c686daa76a983386593d1b69c113a7322bca33f0e485e777ad6d48ca3d976e6e62c0cdb70c05edbf1146f478dacbf53cb885b719b011e91d378abdcd32d31cbacf15965bed833906367db1f010603dd6cc7ecc57d6c64e586f27b6eb1cd8f3ff52e39715185bb4cf37bec63317a8bc1abc54a575c32018e27fa6de1053cdef9ebb13d14574fb7b0b6fde06c3c07494f848d0e75ff0595a993c199443ffdef91d8bffa709a5b81670095b1ca95b1eae0554288e2d39aaaeaa2a5956a003a49b58ec65d7d6b9044fd8004aa5b93ed9f1903069c981042021b57f8f8eac4c7bcfd7249bfc5cda2d5cb42688631b3e2df6a4e654360331fbdaf76ff1eeace80b0bb6f80433d944dd9af70b432f2231734f8a49692db89cf1c2256976a0ead11a14fdca26e01644fbfc0d4fb511dc48020f89bb9ba19d92a8d178203642a911410331ab4d7f52c0036d3145266cac9509a2fdb60dc87816868006733c0547bd40eaa9a32760e54c615cb2e24317507e3964b375fbfa285d7e461906ee627e2c3a98fb7291372dd4725decee95e31489693c7bf54f6007eceae504ad4d0280a33c0ba91b0a5c9bdd389c53f58573f01d839c384c3d9cfe9a9d6c17552d8304508c6867ee7f788bcdd6acb9c4889d2fde56d2762433e8c9ae58026bd09ecfca9ae7967a3a52f55e9691c768da774dd1936ece756a17b77457620fff2673b0e982cb172f8cfa199df8b6c12f36c3967e28e23c239ba166d803cb2dc858f5abf4a4e31cc763a5698a6699a1dd7701cb94420b360f6aa738663faabdf93370ccd714415f02359fd90fcaad79ef6b3a95b60f3a6b1e7d928b97be73613f290f35e446d492698391b533104a0dd9438fa5c75a64731574d618456b33d80a202a0e54e7eca8c77443b2072d4b3d585ffb663c4a227750812aabe73ebd909476ab6316e8a5240b918caa4d8b25f01c815f3d13e0e013d727e86233622b900b7bab718fc91082ef1be353b45a4e6da4d61c619aac0ca625bc93f53cabe5b92c60a299f0fdcdf48e8af6785dc429647149d761903e2fdfde4b22b1e5b8f12b04826ebb4db08d8c597512215c2d6ed2195b421d0c0730d16c581a285348a761ec898d639922c43b2989737820dc52a42d12fdafeacd96734c312d266daa884e216d06ae181012e25bab670312949c5ee381968b0b050be646566ca30a0ba4a5e8e15ae77dc11af06323b16bd075586a6d8358326758965edcd2b1495124d26f7750e37977e16f613d3c55ec5c40674127bf32075756f776636216e045b0fec45d8fa2a5787d4d53239e007c6bebacefd5bae358f8208aa2da185904c1d30b2b645887a6fa54cb8ab6fe88cdae94bedd734f92fcf0c92dc3f8ea160bb132a1687492389b8ed5440719b6f3c0c9af08d1a7c243b7225a3949eadeeafd6548aa2e11bf4c5804cd4ad9fbe9a8bd8f1e5545208af55ed8d04dc6d8971110bbfa9a852747de466d986f98bfebd1a5f529f560257526bc41eff53a5f5c723c2678debd75cbe2c84ad16411ae9f268bbdff72f02899bad74186de874d7362dc5a74a39c845632800ed61c3b7241700a9bc1cdd4dbab77d80f60fd3e8c0589896e9ca221c2622e4dd74a745ec1823c3bb0eac5b0e7781b78bc82187ecce474bb2c07fe6175978b091b98b6f9ac023c25abf329ee30972558b4b3e96bd1b52a983bde4dec18e5f0c89fcdb3f4266bcd8c150be1e46ff3fe4f015ec7e1ff8d16ce38e26cc8fe9e5ee6e3dc71f5383b9d1e39fc6ffac86ff974e5b04d95884461daff873f9d4853255aa0c87e44da768838898b38c6b071fc5f39e5e02101e34cdb1fbaaf60c0ccfc8527e9523ce2bbeac56b0a673e5b44a879f37a3f945452e10d51dbe221c0c80e17ba0fe483c455d5d00150dd50074c2c730779b1425cd0510b44ae2a767397540788cf1238fc5f94be09c847bdf7c7743e873ea889938c6ac3524223ba5d690f10fbd39b27c8ff7ea966c041cf33c012191a6dbec18feea9aae63838e71ded263488cf65732a33e8874fc866e1e30b23960e277efd5018a54731509812cf8a7ea21acfa34d8e8220fb0d9448ba6f71175720352b8fc6d7b51fb0e87b5835526d753170c0041d5479730fa023948730a5b53dda53d5574e1ce3ce38c0cd896b1471f23203703489c1cdc6ab7615582bab1e7a2a6b595d337a4a0c94b79d1f3818f7b30470972089b1fb70dd9822b052c8ec4e55ac4b27f8c79bf80c73dbd094df364f3781594b4713aabc5aac8ae404803171f358ce61af533a18ac7eef0f54a431405152ad2c048ee02999f34b0169f52dd8d595eacf0d7050b8a44e6f04d60ee1d7f7d7687464325fed47a3492f84255100f00efa833a3ca422447eb69b16885cea7e7f6c61b57a66a958296180d8c568ba6757b2e68c0f43fcf365eb38158b316d2b62f03ec1224108ff2474be46628e02180e3052170c8e98afb50a1d9ebeefa19593ed1203126509769862d051ca2af749ef8ce9920fa67b0e01982b1339c14df3d4ffd79474c7d6f826f164aec3c924db9dd5255f21fcab13978efb48f34beb2d1f91c52bc09055ed7926911d8719567ae56f243758eadddda696c00e39acc9bf4ae586c517019868063b4bca09c5e69ccd0a9dad221331fcf7f4de095f20f9f0383245eae7dcc650732e600cb3de172172549079e0ad9ad9fab418fdee1d162b1277a6bad3db5b20e2a9b3ad50015b178c2bbb5671843ad06963113e9be061e473d34f580b3ef5ff958603c8898fd69cc1db3db2c1bf14d4cf9cf8d4e04d37cd9f53127b4b190c43b05db2ac54137015b4f57da88575842cb982ddcd575e619d3fd62fd1c1724fd97fe9cb2fb7d85c5f5622dcbbadf99d425eb650f78553f95cbd19c0d11a5f6fe1efe5a44fa948e8ccf025187ddba5176e0af67be351de98c8282c58455a2f90f3cd0700139f138117bde5697a4a7078d145ae79fe92b889167f03c49eab688a00712dc766c376871c94a233a2a8e639593590a6603bfbf7ea0c01945e7ae8bea7124f1f8a28d94b654a9666c034f3717ded9266780367e288b892dd4174508b33fbaa06e1e93c73c37639706e56cbe7cefcb33e93e39f39dd70d773ce002edee75a4d68926f0cd4b9b3d582a39323ea73eea5daa8fac9e02949ede0cb92eb580820d005ee02b823ccb86e6182cb03bd5ab3b533c08e2c0a477d295ab00872bc2775e906031f584e7098c2116b75e3b7cd901aff538ba257dbccb7d857215751c6a4de8e155f40ba500fa3a6cf151653d4cc28fa308017744abd2fe63abfe4a53ce3c83dde7153f6a6f87b4465d3f3de46feeaa5be0241a81405cfe87ce054e7103316ff4429890278a36896d34426768c999d410027116a5c1b6c37a76a7ede604a993f6a2960d795bf3160b65b25fc56360d9813d514076af70fc226508ae0eaa37eb0ee9159e1c8f7dcca362b512d31cabcb8408eb2fcbea8fdfe876fee33ee0a477e4758ca3b06e80e8495e1322ad6dc3857c7b269fc0decf8bf6a7f5a745ea24eb18e8611eb537dda66c1782dc452bc39cef30c18e335445f28355e2624a004666283c2ea439673387fcb344342258b8727a1e3803cc243e81b1ca96be34c5494e288e3623f18b709699916362c21629cb36e63970d59a4211ef1e8215a04317fd54f43f02d29403bd86bb043105ebec096953cd3f1357c284c05d723cd5d2fca1a5c975fa0ff37e18b96757d9745c7830e849723e6bf92633ab033b40866713deceb4910de5b8133ea124d82ede856c67d9048c22800c21876bbe5ec19ca5d36203727562bc550608a0d97c85b26991d7d42a71b7061ccbb7b759fb6529f5e91227cb715ce9061dca0a66da848687eb0a8b94250b547087c6dff7ea0da3c25fcc27fa1fece47a353b8f45df0d761f109c7b5f56999a3e65b1cdb120460bffdc31ab73080db5a6fb4cd7f0045f5205342f94622fbc7b46ee60780fa122b9d73f31996aeb83aef97c68baf3f94dfd1f22e3cdc52c48b880698d5fc856e3e4df1688bb5278664c6c806a3eaf5a67b0db96540637b4e37ab529aebe1de6d6b8647c4c3b5ed8a448af88e93c2e98ff15d782e1ea5ffee3b6db71039aceec6443b2455996ec55174f563383350c78689d48e6c6e6c02bd5a9b8a686ea9f7f2bed0b193a4efe43e69217c067d4aaec43218b402f52378cf6b319539dc6b617fd98f3d9961a7cca99413ca638fc09b1543ec3ca0924a8d2172eafd98830a254c099302bd1bd11a1ae575796933c8257bf6114abd0f9893a868c5566579087f3edb7be0a1f7590ed7329180b091482c3f352a7cb503a86a2c3e83576d3c3c6e3433ff68d18952115e02b0c2f37ce9b224e807d6cabacc00aac526e857300b09b3f38120a3bcc3ee3d1708626d594e2a49c1fa86c05c97cd0abba825f13b0210194680731ce9024ebfe4aae3d2661f242193f60d6e66a735294d877213aa3d2eccdc45f15bb601073e07f27621aa4fe21ae8a7d8d7c4fc05d2ab181681291b71218aba5464bcb15d2fe69bd663d31eed08517c914728e1c2d674e649c90c556d7c2261e2ce5f8d8219cfa31320cf51e8f9c4a0124b1ef8cab36926770413c374a37cb529288bdb5a6c7df31de8abd18c13355f59804d6494431aa88df02518b43e4554486af536eebf6eb926e17211d1da6574985ee49e747f38fe4dfb2530fe7fdf94bc9e32bbbe38bd9f5ff714aae5b69db2b0118bcca2c6a60b2d2ff2fb898d610e0399495bcacef26879a04c8efce115e48be759b22c88e0fe647e486c528b09bfbda0778c17a9652b5df2703c47053a99c36d630cfe16735291eb52603250be06ea2705145f6f19e44efec3e9d20d9ece742e3808c693c60d8b4c1d2fbe2167d90f638deb826a98741fba6c1fc1ed2e442094c7370094da3935c144b18c588e994155fd156c06606c74dd8cf6e45ed99a8f00745e7bbd8686b34ccdbe182d35e9f6abbae34a3ea8cc5faa55db49fd780a2198948d99b407085b8c91a2c44be4e6f3fe6f32a3fd6497ae0b3ad4dce757f9573d8e6e0659f003f2024cd490aa69a20df905b04808930261ddbcc146416b1b344ee8c0dd3022bb38e3023af6ee4aa06fcbe3a5e7883b1f7560f71776809eabcc1231dd04339449cef3a9cbccd75cf686824068895e1961aff5c675ab87b68575c149e1b9552cbc98992fde717b05a36b4cc0746a00c635450dd505851a5795d0a4f305bf2496013c7e09cc9dc58ebe7231f12645de9c297ae59a4778801cee9a6cfa5bf63e12be655bbc7c38086da261099616f7e43fbe0b9be169d21f4f9c08a8fd323fb98ed3801e1abac2c1a4cbf546027c9d82b0fda75d9bb0d800d40dc0baa7bfb5f557bf4e89c6c6fcd4b8cd6fde4af2bc804fde6b2fab7fab16c8752e1bdf320817e3ae60bb60a850fe483ac8b7ca1087d5fc0323c25435ce554b7cee2bf2d063b12f0a0775a03065c2f69543bf29422c5a2440a3e3b58f4e2c4ea320bd2f77e90130c90f9a78ac56bbd5e616c249209c72ecba2a41047aa5314cf5546a21b5e7c15d675dd526c5f58a1b7224a77c071a76f58cb4ad4315950e2db5b4f719623b100cf36438095f92e6295b2f1a00bed4b18d10a2880c05aeb2aa19a6cbe31eaf26dc00a8c351ecd3813fd98e12f812045b696fb0d698048273a13110c415942c6a37d1aa5efb13b9912539c30dbc5ca2599ddcd24308edc7619018fa2e4fc80f638f3b49c58c59d140dae4704ea62a294e6a767abaa888b32b19d86137164a8797ba85a0afe137d839af0acb2b314b396983578becb145062a99d83b3d1646cd0e5cb050f1806d63033e4128a80f3c0e0c7d8eb55c50ea2edecd182dd84dc3f734627fcc35867ada321241a18fefd2744d99dfd44a6e5593adb52d24a4304f798d76dfbd771694250fd45aef5a1b69be7ac3be4419966d0760a650c00c6759383d322d70b6e83a04dfaf9d80979d00eb773081535c507fdf3092f66e61f705f169fa5c034b53d9dd0aa8309ce7346c7dc9878bf66f38fd738907b49bd8f4b26831180209e0b5098088160d7ed1387f95f29f7ddf7f63802e1027f6deb6137b81395bda5bdc10a5b2561f0249eb5595a6ac8d0a21e30d05daed2e75506ba99c683c0dcfd13637e09021ce7ae1f84d0d2fc655c5208118b35627d5b7b2c85e7104c73d0476a6a67406abf58f1f3db9b3c87e0c040deba1596e3711fffcd068c43266cbcc177c224dbfe6ab3cf777ca0a434712cdaf77b43190a2a8405d81c2f8ea58fcf99a35f2bf53dce87ee4eeb5b72576909aa212ade4ea708cc385e12b7f1aed85cb34e549fc30fef6e90fe94f93b45c7ed511264536665283cf5bb00e86021b403f1bcc09a63ab516a8b8b7819478de23259e07c6f90b2900fd9bbd9d1b2eda30e4601d342e888ffb2b5b18e00e285dbeccb04df64a18ae3dca0597337490a1e604b6e8def567576c5611df74e82d0f49fd6268e2be585d6fc6ce2d0904bb83ac35ce72d0e08719c7bd87497dadf8d2acbea6693bba543253df3ff68d7977669800231c94d1457c6199c56e2501caa2a40f477e946ed596c3efbd6e06c91758b955c99a45729a491b824da2fa92139cdc4586bf04d679d8be0d740dc251a1fdccb27d90af8c6b40ac736c8fcdfb626eaf88e64c7af9e9edb523bbfa3583c68126e18b228010e828b2b46c951e3a8b987c3b2784cf77dafe1724c25cad47c716dc4b0a97a020697994255f4b8383d49bfb15898a219c54f0e23a4de807fb21eebee19db49ceb08e083ef58b6275b96f29875fdf78a3b8e2ee0bb38c271184c5b8b2e829887fa2ac74bbd62a2981febc0223a600667be25f94edab809e46651276c4c49b541bfc9018e0cae029a86cd430fa2a4067044698ecd63967bfbe6de10d4b59e5b73bb426a40d1b07876236c17e4777f879dc3e26d733f4fd9eaa73a257c00eb582447c4f5990ddb1203ad75a463db39d69f1f60c8be6cedf63e63ce216cae7cbea095f84853a006c11af118f7c3ed34964405b441f85f3bca00d1c39f72252f8dc080a4df7cd46075aefe01d28534cc2c7cef48f928ae85d55a50a0576493b74ad28f5e863b0e9c8d67f18edae48bc3bfc931c211baf2a622436ddbd095954a7b4975793c6ec72902a02c72b28860f44a99865c95a409d1843642481cbdcc5a47f3bb3a8518efa588562674ca309d54c7cfee4dad97a76e71289a3b2b003e0669aca2733ca20691399e5d45754c0a5410ae4ce8caff29ca4b1ec861fe286fbfd934f8d364ba297b768924449cdc850394a68c6a7f354568e4ec06c5521b9a5f5d7c041b4ec3851ec4c117b68423de68cd177ca434bc683be517bf3022da314d09b72639288645b56ba437367bdf1218b878f5c74b279397933b9258b0f7e70ac968898215dabecd61cbcb7468afbaa4c3fb951767cf3943673fc557bb284fce129f1639647b765080676ded7c9deb53bb214b681d94af1b5ede08ef5b8c621b724c35716f852681731da6db8b587be1c47432622e5f29c15f8566ae99931483755b82af0f4a109eefbec2dbc557e4512abfceb951a9da4c52cf1d3d50163a35f5e73967e2d2f7f2f1f4fc35364189c8280600935677efee9835bf4c0456e9bef1fcb72d6cb957e0f1a6b5bafa7325674a15c327b320f2eced8ed67fcfcb5e1d8a8fd054b53d98e70003d7c7e88d7ca0c71ca2fe69287c8e032a123e22d16d94aa8de17e32406a6ad56ce5023fc47f38be4e21b5068b1cc0b05183470a317e6d8c73bb60071cd80b0eb7a7a93c28776ea78c4af6f5552a97b80806f1f1689b12c80abf8bb175aa4c4614b56aba9661266e32ffdff7d0696d8fe4368e592b1aa9f4501993bbbd9a703650f700b249c1f85f78007669cec1f18245e0454db08708a2451911df02c09f705d873933cd6040ff64a47cd8bdcfe6f8405e1a3f590e2e23b91d55f45f4667b4445ef722dcd9f9fe26aa4a21d47919365ed0cdcbcc8b05119e7f3d011da1f28fc5a772d5644b345878594cd1758adb1634efd177c7ce6d5b054f493fa3c67a421303a1af6d2026ed79dd7deb5dab09109b3e03c72693e64d6a8fdea06fbab52c6170878b2d257e43f775ab7d5c0ab5899dcde32aaf84596db621866f3006924ad59620238f34121318de3a954d85bcf7157cfac4d788d4ebaca799ba7b74ee59cfbe8a15d0d1692a45aef34719b08f640645d744ece46bdd956b27653d86d511c71ab26e6c44d222e91865bb4f552eabc8a8a8f79a538a60e9fa1651279c22bc4dba49f508554b03385d81e0194627de35b44261839c73df169e08f84e0e4f4e662edbb72aacca4f6f213aeaa37ba446bc33ba8484f74b4534971ad04855ed37dc3a5b2646ae507a4401ae9d2bdf0078f5734006e9e8c190da286897e2147a9ad90fb4295c18f92c29bfa1f21af0194a605054b7eaa2150e26e0bf50e34f9cfd", 0x2000, &(0x7f00000028c0)={&(0x7f0000000000)={0x50, 0x0, 0x9, {0x7, 0x24, 0x7, 0x60001, 0x400, 0x971, 0x2, 0x101}}, &(0x7f0000000080)={0x18, 0x0, 0x2, {0x6f43}}, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x77d8}}, &(0x7f0000000100)={0x18, 0x0, 0x8, {0x1}}, &(0x7f0000000140)={0x18, 0x0, 0x6, {0x20}}, &(0x7f0000000180)={0x28, 0xfffffffffffffffe, 0x3, {{0xdbb4, 0x8000, 0x1, r2}}}, &(0x7f00000001c0)={0x60, 0x0, 0x5db848e8, {{0x8, 0xe, 0x2, 0x80000000, 0xe17, 0x7fffffff, 0x4, 0x80000001}}}, &(0x7f0000000240)={0x18, 0x0, 0x8, {0x101}}, &(0x7f0000000280)={0x11, 0x0, 0xfffffffffffff001, {'\x00'}}, &(0x7f00000002c0)={0x20, 0x0, 0xff, {0x0, 0x6}}, &(0x7f0000002340)={0x78, 0xffffffffffffffda, 0x0, {0xcd53ccc, 0x3, 0x0, {0x0, 0x1, 0x20, 0x31, 0xdac, 0x9, 0x5, 0x4, 0x5, 0x6000, 0x7, r4, 0xee00, 0x0, 0x101}}}, &(0x7f0000002540)={0x90, 0x0, 0x7f, {0x3, 0x3, 0x1000, 0x7, 0x1d1d, 0x2, {0x0, 0x10000, 0xfffffffffffff800, 0x8000000000000000, 0x0, 0x4, 0x8001, 0x5, 0x7, 0x8000, 0x1, r5, r6, 0x100, 0x7fff}}}, &(0x7f0000002600)={0x68, 0xffffffffffffffda, 0x9, [{0x5, 0x5, 0x6, 0xffffffc0, ']]@&}\\'}, {0x2, 0x8, 0x3, 0x800, '+#)'}, {0x2, 0x2, 0x0, 0x3}]}, &(0x7f0000002700)={0xb0, 0xfffffffffffffffe, 0x2, [{{0x3, 0x2, 0x3, 0x8000000000000001, 0x589d5e57, 0x20, {0x0, 0xedd, 0x0, 0x3f, 0x8000000000000000, 0x213, 0x0, 0x40, 0xa6e7, 0x6000, 0x9b6, 0xffffffffffffffff, r7, 0x8000, 0x5}}, {0x6, 0x0, 0x5, 0x7, ':,-+:'}}]}, &(0x7f00000027c0)={0xa0, 0x0, 0x6, {{0x1, 0x2, 0x5bb, 0x1, 0xdfb2, 0x3de0, {0x3, 0x1, 0x4, 0x8, 0x3, 0x3, 0x7f, 0x6, 0x0, 0x2adca8024618720e, 0x400, 0xee01, 0x0, 0x8, 0x7fff}}, {0x0, 0xd}}}, &(0x7f0000002880)={0x20, 0x0, 0x7, {0x400, 0x4, 0x3ff, 0xffff1816}}}) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) [ 2931.181359][ T9393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:08 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x900000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:08 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x7, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x3ff, 0xffffffffffffffff, 0x8, 0x7, 0xfffffffffffffffd, 0x7ff, 0x7f, 0x8, 0xffffffff, 0x8000000000000001, 0x8000000000000001, 0x5, 0x0, 0x1, 0x7], 0x4, 0x4}) [ 2931.402681][ T9409] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2931.431750][ T9411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:08 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) [ 2931.490807][ T9410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2931.608582][ T9423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:08 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xe00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:08 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x8, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2931.834817][ T9434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2931.936002][ T9436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2931.975573][ T9435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:08 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) 08:52:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2932.180460][ T9444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xf00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:09 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x9, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2932.309945][ T9454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2932.377300][ T9457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2932.394802][ T9455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x10, r4, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:09 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xe00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:09 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) [ 2932.533405][ T9263] Bluetooth: hci3: command 0x040f tx timeout [ 2932.604581][ T9466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2932.609831][ T9467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1100000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:09 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0xa, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2932.738285][ T9471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2932.846502][ T9477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2932.890166][ T9476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:09 executing program 5: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) 08:52:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2933.051270][ T9483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:10 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1200000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:10 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0xb, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2933.303173][ T9495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2933.309018][ T9497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:10 executing program 5: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) (async) 08:52:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2933.458846][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2933.496128][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:10 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1203000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2933.788273][ T9520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:10 executing program 5: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) (async) [ 2933.971663][ T9527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2934.038995][ T9529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:11 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1400000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2934.327771][ T9533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:11 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100, 0x2}) 08:52:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2934.618625][T12003] Bluetooth: hci3: command 0x0419 tx timeout [ 2934.735954][ T6669] device hsr_slave_0 left promiscuous mode [ 2934.753180][ T6669] device hsr_slave_1 left promiscuous mode [ 2934.761525][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2934.809686][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2934.865694][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2934.897656][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2934.935351][ T6669] device bridge_slave_1 left promiscuous mode [ 2934.963261][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 2935.002345][ T6669] device bridge_slave_0 left promiscuous mode [ 2935.013374][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 2935.060542][ T6669] device veth1_macvtap left promiscuous mode [ 2935.079569][ T6669] device veth0_macvtap left promiscuous mode [ 2935.099201][ T6669] device veth1_vlan left promiscuous mode [ 2935.116203][ T6669] device veth0_vlan left promiscuous mode [ 2935.682459][ T6669] team0 (unregistering): Port device team_slave_1 removed [ 2935.698657][ T6669] team0 (unregistering): Port device team_slave_0 removed [ 2935.711605][ T6669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2935.729789][ T6669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2935.805650][ T6669] bond0 (unregistering): Released all slaves [ 2939.253069][ T1213] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 2943.903086][ T1213] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 2948.373102][ T1213] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 2950.779260][ T9299] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2950.789286][ T9299] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2950.798743][ T9299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2950.807512][ T9299] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2950.815507][ T9299] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2950.822736][ T9299] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2950.914763][ T9740] chnl_net:caif_netlink_parms(): no params data found [ 2950.958893][ T9740] bridge0: port 1(bridge_slave_0) entered blocking state [ 2950.966210][ T9740] bridge0: port 1(bridge_slave_0) entered disabled state [ 2950.974589][ T9740] device bridge_slave_0 entered promiscuous mode [ 2950.982551][ T9740] bridge0: port 2(bridge_slave_1) entered blocking state [ 2950.989824][ T9740] bridge0: port 2(bridge_slave_1) entered disabled state [ 2950.998323][ T9740] device bridge_slave_1 entered promiscuous mode [ 2951.024739][ T9740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2951.035757][ T9740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2951.062589][ T9740] team0: Port device team_slave_0 added [ 2951.070154][ T9740] team0: Port device team_slave_1 added [ 2951.088878][ T9740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2951.096023][ T9740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2951.122579][ T9740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2951.135700][ T9740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2951.142632][ T9740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2951.173087][ T9740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2951.201827][ T9740] device hsr_slave_0 entered promiscuous mode [ 2951.208895][ T9740] device hsr_slave_1 entered promiscuous mode [ 2951.215579][ T9740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2951.223195][ T9740] Cannot create hsr debugfs directory [ 2951.294916][ T9740] bridge0: port 2(bridge_slave_1) entered blocking state [ 2951.302000][ T9740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2951.309393][ T9740] bridge0: port 1(bridge_slave_0) entered blocking state [ 2951.316535][ T9740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2951.370376][ T9740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2951.386127][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2951.396298][T12003] bridge0: port 1(bridge_slave_0) entered disabled state [ 2951.404741][T12003] bridge0: port 2(bridge_slave_1) entered disabled state [ 2951.414808][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2951.428250][ T9740] 8021q: adding VLAN 0 to HW filter on device team0 [ 2951.439669][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2951.448334][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 2951.455413][T12003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2951.474615][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2951.483367][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 2951.490417][T12003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2951.516772][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2951.526184][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2951.535532][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2951.547492][ T9740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2951.559164][ T9740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2951.571535][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2951.579774][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2951.600821][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2951.608510][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2951.621144][ T9740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2951.641582][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2951.666474][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2951.675072][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2951.682712][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2951.691312][ T9740] device veth0_vlan entered promiscuous mode [ 2951.705757][ T9740] device veth1_vlan entered promiscuous mode [ 2951.728234][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2951.736514][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2951.744983][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2951.756709][ T9740] device veth0_macvtap entered promiscuous mode [ 2951.768355][ T9740] device veth1_macvtap entered promiscuous mode [ 2951.782683][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2951.794407][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2951.804728][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2951.815607][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2951.826274][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2951.836995][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2951.849736][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2951.861680][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2951.875123][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2951.885864][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2951.898474][ T9740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2951.907591][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2951.917938][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2951.929343][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2951.940511][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2951.951074][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2951.961667][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2951.971569][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2951.982118][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2951.992441][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2952.002938][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2952.012969][ T9740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2952.025345][ T9740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2952.037015][ T9740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2952.045696][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2952.055359][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2952.121877][ T4570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2952.135859][ T4570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2952.158112][T18320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2952.166527][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2952.167546][T18320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2952.186117][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2952.226222][ T9746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2952.239375][ T9745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:29 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0xc, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:29 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100, 0x2}) 08:52:29 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1500000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:29 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x100, 0x2}) [ 2952.613443][ T9758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2952.665503][ T9761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:29 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x3}}, 0x10) [ 2952.721430][ T9765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2952.787468][ T9769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2952.828857][ T9769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2952.853344][ T3678] Bluetooth: hci5: command 0x0409 tx timeout 08:52:29 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1600000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2953.051399][ T9772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:29 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0xf, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:29 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x3}}, 0x10) [ 2953.169749][ T9776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2953.184057][ T9774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2953.261276][ T9781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:30 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x3}}, 0x10) 08:52:30 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1700000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:30 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x18, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2953.445623][ T9787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2953.453077][ T9789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2953.460631][ T9787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:30 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x3}}, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x3}}, 0x10) (async) [ 2953.560272][ T9791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2953.584534][ T9790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2953.638991][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2953.660289][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2953.681828][ T9794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2953.684326][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:30 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1800000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2953.864300][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:30 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x2, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x1, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:30 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x204}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="080000000000000001000000000000000700000000000009000000000000000700000000752600ffffffff0100000001000000060000002f0000000000000000000000000000000000010000000000010000000100"/114]) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) [ 2954.010614][ T9808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:30 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1500000000000000, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2954.109011][ T9814] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2954.124839][ T9814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:30 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1900000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000140)="660f38827900660f38817d000fc7a907002e660f388130f20f1aa1e4000f01c5670ff9220f3802050f1ada0f09", 0x2d}], 0x1, 0x2, &(0x7f0000000200)=[@cr0={0x0, 0x2a}, @efer={0x2, 0x6101}], 0x2) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f0000000000)={0xc1, 0x0, 0x2}) r6 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x204}) syncfs(r6) [ 2954.199601][ T9816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2954.253202][ T9815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2954.266423][ T9818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x204}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="080000000000000001000000000000000700000000000009000000000000000700000000752600ffffffff0100000001000000060000002f0000000000000000000000000000000000010000000000010000000100"/114]) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x204}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="080000000000000001000000000000000700000000000009000000000000000700000000752600ffffffff0100000001000000060000002f0000000000000000000000000000000000010000000000010000000100"/114]) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) 08:52:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2954.538652][ T9822] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2954.553814][ T9828] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:52:31 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1a00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x698da02083eb9ee2, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2954.621175][ T9828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2954.644051][ T9832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2954.679410][ T9835] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2954.684968][ T9837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:31 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1b00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:31 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x204}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYBLOB="080000000000000001000000000000000700000000000009000000000000000700000000752600ffffffff0100000001000000060000002f0000000000000000000000000000000000010000000000010000000100"/114]) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) [ 2955.105991][ T9842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2955.175194][ T6669] device hsr_slave_0 left promiscuous mode [ 2955.210274][ T6669] device hsr_slave_1 left promiscuous mode [ 2955.229293][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2955.229886][ T9845] program syz-executor.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2955.255994][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2955.293072][ T9846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2955.328642][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2955.359756][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2955.388628][ T6669] device bridge_slave_1 left promiscuous mode [ 2955.402186][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 2955.425439][ T6669] device bridge_slave_0 left promiscuous mode [ 2955.431857][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 2955.469968][ T6669] device veth1_macvtap left promiscuous mode [ 2955.483850][ T6669] device veth0_macvtap left promiscuous mode [ 2955.498912][ T6669] device veth1_vlan left promiscuous mode [ 2955.529392][ T6669] device veth0_vlan left promiscuous mode [ 2955.776921][ T6669] team0 (unregistering): Port device team_slave_1 removed [ 2955.791269][ T6669] team0 (unregistering): Port device team_slave_0 removed [ 2955.805006][ T6669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2955.824418][ T6669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2955.896766][ T6669] bond0 (unregistering): Released all slaves [ 2958.706009][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 2958.712335][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.572992][ T1213] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 2964.053022][ T1213] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 2966.468659][ T9299] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2966.477863][ T9299] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2966.485871][ T9299] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2966.494541][ T9299] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2966.502052][ T9299] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2966.509472][ T9299] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2966.593980][ T9851] chnl_net:caif_netlink_parms(): no params data found [ 2966.640638][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 2966.647929][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state [ 2966.655968][ T9851] device bridge_slave_0 entered promiscuous mode [ 2966.664510][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 2966.671906][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state [ 2966.680168][ T9851] device bridge_slave_1 entered promiscuous mode [ 2966.708742][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2966.720243][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2966.749888][ T9851] team0: Port device team_slave_0 added [ 2966.757163][ T9851] team0: Port device team_slave_1 added [ 2966.778191][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2966.785480][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2966.812022][ T9851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2966.826550][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2966.834938][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2966.864065][ T9851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2966.894589][ T9851] device hsr_slave_0 entered promiscuous mode [ 2966.901153][ T9851] device hsr_slave_1 entered promiscuous mode [ 2966.907936][ T9851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2966.916162][ T9851] Cannot create hsr debugfs directory [ 2966.995897][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state [ 2967.003010][ T9851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2967.010291][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state [ 2967.017378][ T9851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2967.068304][ T9851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2967.082931][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2967.090853][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 2967.102324][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 2967.110763][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2967.125640][ T9851] 8021q: adding VLAN 0 to HW filter on device team0 [ 2967.136837][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2967.145211][T13117] bridge0: port 1(bridge_slave_0) entered blocking state [ 2967.152268][T13117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2967.176208][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2967.185003][T13117] bridge0: port 2(bridge_slave_1) entered blocking state [ 2967.192048][T13117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2967.201542][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2967.212274][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2967.223576][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2967.236122][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2967.250347][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2967.263468][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2967.282494][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2967.290014][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2967.305774][ T9851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2967.320874][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2967.341456][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2967.352418][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2967.360682][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2967.371676][ T9851] device veth0_vlan entered promiscuous mode [ 2967.389215][ T9851] device veth1_vlan entered promiscuous mode [ 2967.407997][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2967.417344][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2967.426041][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2967.438151][ T9851] device veth0_macvtap entered promiscuous mode [ 2967.448062][ T9851] device veth1_macvtap entered promiscuous mode [ 2967.464240][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2967.474894][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2967.487982][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2967.500461][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2967.510810][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2967.521496][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2967.531510][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2967.542148][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2967.552427][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2967.563223][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2967.574793][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2967.585135][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2967.595358][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2967.605874][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2967.618670][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2967.628666][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2967.639397][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2967.649326][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2967.661365][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2967.671556][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2967.682234][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2967.692728][ T9851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2967.703366][ T9851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2967.714723][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2967.727131][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2967.735973][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2967.809211][ T6671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2967.828447][ T6671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2967.843438][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2967.846592][ T4570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2967.859135][ T4570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2967.875905][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2967.919517][ T9857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2967.933565][ T9856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:45 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1c00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:45 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x3, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:45 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1a00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x698da02083eb9ee2, 0x40) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:45 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_b, @from_mac=@broadcast, @device_b, {0x1, 0x3}}, {0xc, 0x0, 0x2}}, {@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6757}, @device_a, @from_mac, @initial, {0x8, 0x740}}, {0x1, 0x1, 0x0, 0x1, 0x4}}}, @ver_80211n={0x0, 0x2, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, @random="c2580250e59c2e0f86bd7d829297158c2e967b9a92bf02da"}, 0x50) [ 2968.281388][ T9863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2968.295313][ T9864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2968.296158][ T9865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2968.325079][ T9871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2968.328591][ T9863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2968.361361][ T9866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2968.543029][T12003] Bluetooth: hci5: command 0x0409 tx timeout 08:52:45 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1d00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2968.658589][ T9876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000300)={{}, {0xffffffff}, 0x0, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)="1759d9d397f72cef6c1be8a8d144da15b772c8d5383063f01988a9a4b8d2e0c1a4cb6cce429a0322c66ab8c97e4814e3fa7c1318e885cbae2353622f58c59e7312e7ee62dacc48e51f4c6e8367f8d9ff5132ca72c7407c307601577f7842d5ba0e1a50c4c68f62fecc34ade6027d7660752201159b7cf68a09b742e447cee8b046385195362d7c63cb8ca0d07a128fb832522341e063e1695461adf4b94618133ae5c48f6f4ded099f785df7ff5d722d31373a6bdbc150657a9746fe64f82247d5fca94b41399512c7b085ee0946afc7e5884fce931ddb0d9e5fc67d3f9cf8c12406a941fa1698f0f952d39ad0121ffb7db6bdebdbe8b0a4c516265a2bd7ff646784d1e22522564b806bb24ff4cbd197782fb97782b6520a9218af8a47aa8d53471d626b8696130bf8b3075fe592d59eabfd198d187f7398af53cef31edcc5524f0b058ae1217949ef7e476762e1db1153d395b0ff585708c491c24e1089af8be93a6ae010d94a909c6e2327df863b40bf85487aa2b4b32a71cfd2bea021d4b2eb63001125c10260c103ad1c2bdef37cc364f5a9bdf39b008afc9f0002d9c720f0677244a8671cffda7b306c91f170d30e65e12a0eaaae79ab383b45c459cce58502800d858439209b92afe77c9235431c33aee3206fdcb8231402cf25c0083ffacbe05b94727bbc0a26b98fff2152ec94c7ff482c39c5", 0x1f7, 0x0, &(0x7f0000000440)={0x2, 0xf3, {0x1, 0xc, 0xd7, "61470d6a3a23dac59754ad84018552b794d9abc60e5c572355c7c621b29c3cea1d313197ff6bb334c72265356d3067fd0cfd21493f2a21f14f1bafe639f8b5aa843f225c66a6daa02a9ab06bd749f0e53d36347472b35321a06815e0cb3016f5aaf26a2da72ca82c48c423ad399492eb9e67feb110a31073c963184512dcfac048e00c2c548b14a5d77a9529985006b405cf2fff7be996f17025b3233305e1c9520664b2c7cf7505d9bb4cf88006f9dbd91953bbd93a852598920031fba9ae67ab7fed5f2aa7ba71a87bae591f3dc33bb9420886171c8a", 0xf, "43d8de77f6b564437b7b6dc9e4109c"}, 0x1000, "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"}, 0x10ff}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:52:45 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x4, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:45 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_b, @from_mac=@broadcast, @device_b, {0x1, 0x3}}, {0xc, 0x0, 0x2}}, {@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6757}, @device_a, @from_mac, @initial, {0x8, 0x740}}, {0x1, 0x1, 0x0, 0x1, 0x4}}}, @ver_80211n={0x0, 0x2, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, @random="c2580250e59c2e0f86bd7d829297158c2e967b9a92bf02da"}, 0x50) 08:52:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x10000, 0x3, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2968.789523][ T9884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2968.790989][ T9886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2968.878273][ T9882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:45 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1e00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2969.054853][ T9894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:45 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_b, @from_mac=@broadcast, @device_b, {0x1, 0x3}}, {0xc, 0x0, 0x2}}, {@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6757}, @device_a, @from_mac, @initial, {0x8, 0x740}}, {0x1, 0x1, 0x0, 0x1, 0x4}}}, @ver_80211n={0x0, 0x2, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, @random="c2580250e59c2e0f86bd7d829297158c2e967b9a92bf02da"}, 0x50) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_b, @from_mac=@broadcast, @device_b, {0x1, 0x3}}, {0xc, 0x0, 0x2}}, {@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x6757}, @device_a, @from_mac, @initial, {0x8, 0x740}}, {0x1, 0x1, 0x0, 0x1, 0x4}}}, @ver_80211n={0x0, 0x2, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, @random="c2580250e59c2e0f86bd7d829297158c2e967b9a92bf02da"}, 0x50) (async) 08:52:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:52:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x698da02083eb9ee2, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000003c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2969.167836][ T9896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2969.201803][ T9896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:46 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x5, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2969.224172][ T9896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2969.283073][ T9899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2969.314321][ T9906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:46 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x1f00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2969.364921][ T9908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2969.441591][ T9911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:46 executing program 5: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x22) 08:52:46 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x6, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2969.662458][ T9912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x698da02083eb9ee2, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{r7}, r8, 0x6, @inherit={0x70, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"]}, @name="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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:46 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x2000000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2969.763684][ T9915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2969.790664][ T9914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2969.867602][ T9923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:46 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x7400000000000000) 08:52:46 executing program 5: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x22) [ 2969.978914][ T9926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2970.025994][ T9928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:52:46 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x18, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x2100000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2970.189872][ T9935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2970.211784][ T9934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2970.265176][ T9937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x100000000, 0x8, 0x1ff, 0x80, 0x1, 0x3, 0x3, 0x10001, 0x100000001, 0x4, 0x0, 0x200, 0x5, 0x56, 0x1ff, 0xe87], 0x3000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:47 executing program 5: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x22) 08:52:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 2970.406659][ T9944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:52:47 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x25, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:52:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x2200000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2970.584123][ T9954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2970.610903][ T9953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2970.621311][ T4193] Bluetooth: hci5: command 0x041b tx timeout [ 2970.679849][ T9961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:47 executing program 5: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) [ 2970.788720][ T9964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) 08:52:47 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x0, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet6(0xa, 0x5, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x3}, 0x1c) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x698da02083eb9ee2, 0x40) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f00000005c0)={{r7}, r8, 0x6, @inherit={0x70, &(0x7f00000015c0)=ANY=[@ANYBLOB="010000000000000005000000004c47a1a600000000000000890e000000000000000000a507000000000000ce4e000000000000000000000000000008fe0000000000000100000000000000feffffffffffffffff070000000000000700d70d0000000001000000000000160000000000902c381525d5e4f045748301d56c23b73997084b143865d4ae2a96d78334563232c0dacab8143c306877d9bf05460b08757e7f5565f324444cd2e1805c1ef66f09ba29585b3be9e221a85ae08beda11a792f589a32ada69b43e80cced99cba1409f34c56f1afcedd03124a786cb46fc30e6702af2da7d9a19e8f66c2ae3a8cd03aaa0fa80f7b50d95ba42c4d01b02ee56a5077aac9d2d36b9b2cbf30c781"]}, @name="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"}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000100)={"b6551537b5cd9634c2bf932c66403b8a", r8, 0x0, {0x5, 0x20467250}, {0x9, 0x80}, 0x3, [0x100000000, 0x80000000000000, 0x7, 0x7, 0xfffffffffffff2e8, 0x5, 0x4, 0x5, 0x4, 0x9, 0xfffffffffffffffe, 0xffff, 0x8, 0x4, 0x7fffffffffffffff, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:47 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x2300000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2971.039789][ T9969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2971.079811][ T9975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:47 executing program 5: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) (async) [ 2971.095614][ T9968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2971.151204][ T9978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:48 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x2}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2971.201293][ T9978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2971.288273][ T9981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:48 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:48 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x2400000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2971.518840][ T9988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2971.519581][ T9990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2971.553527][ T9987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:52:48 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x2}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2971.679389][ T9994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:48 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x2500000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:52:48 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:52:48 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0xc00}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2971.956007][ T9999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2971.956386][T10000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2971.988627][T10001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2972.010683][ T9997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2972.097976][ T9996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:52:49 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = openat2(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000000)={0x800, "1882ca422b65c3bd01730de63d454a768b0331574ab2a68153b2f62e01c8b26a", 0x2, 0x7, 0xf0d, 0x2, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 08:52:49 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x2}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2972.267309][T10003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2972.395682][ T4570] device hsr_slave_0 left promiscuous mode [ 2972.403238][ T4570] device hsr_slave_1 left promiscuous mode [ 2972.409953][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2972.425248][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2972.442315][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2972.453122][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2972.483227][ T4570] device bridge_slave_1 left promiscuous mode [ 2972.489640][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 2972.518563][ T4570] device bridge_slave_0 left promiscuous mode [ 2972.526725][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 2972.542492][ T4570] device veth1_macvtap left promiscuous mode [ 2972.549004][ T4570] device veth0_macvtap left promiscuous mode [ 2972.556094][ T4570] device veth1_vlan left promiscuous mode [ 2972.562019][ T4570] device veth0_vlan left promiscuous mode [ 2972.693691][ T1132] Bluetooth: hci5: command 0x040f tx timeout [ 2972.961355][ T4570] team0 (unregistering): Port device team_slave_1 removed [ 2972.994686][ T4570] team0 (unregistering): Port device team_slave_0 removed [ 2973.012658][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2973.045666][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2973.172361][ T4570] bond0 (unregistering): Released all slaves [ 2974.773058][ T1132] Bluetooth: hci5: command 0x0419 tx timeout [ 2976.613398][ T9299] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 2981.103727][ T9299] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 2985.573192][ T9299] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 2987.993867][ T1213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2988.003175][ T1213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2988.010901][ T1213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2988.019445][ T1213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2988.026970][ T1213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2988.034529][ T1213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2988.120303][T10012] chnl_net:caif_netlink_parms(): no params data found [ 2988.163462][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 2988.170611][T10012] bridge0: port 1(bridge_slave_0) entered disabled state [ 2988.179303][T10012] device bridge_slave_0 entered promiscuous mode [ 2988.188965][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 2988.196336][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 2988.204717][T10012] device bridge_slave_1 entered promiscuous mode [ 2988.226058][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2988.237529][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2988.263601][T10012] team0: Port device team_slave_0 added [ 2988.270683][T10012] team0: Port device team_slave_1 added [ 2988.291845][T10012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2988.298998][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2988.326934][T10012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2988.344297][T10012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2988.351237][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2988.377751][T10012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2988.407723][T10012] device hsr_slave_0 entered promiscuous mode [ 2988.414647][T10012] device hsr_slave_1 entered promiscuous mode [ 2988.421116][T10012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2988.429085][T10012] Cannot create hsr debugfs directory [ 2988.503308][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 2988.510396][T10012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2988.517707][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 2988.524824][T10012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2988.575675][T10012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2988.591214][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2988.599615][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 2988.607591][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 2988.616864][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2988.631286][T10012] 8021q: adding VLAN 0 to HW filter on device team0 [ 2988.643541][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2988.651875][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 2988.658991][T12003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2988.673600][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2988.681915][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 2988.689024][T12003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2988.718345][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2988.727604][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2988.736405][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2988.744592][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2988.752950][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2988.763685][T10012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2988.797904][T10012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2988.806137][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2988.813859][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2988.831884][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2988.853802][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2988.861962][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2988.870327][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2988.880624][T10012] device veth0_vlan entered promiscuous mode [ 2988.897538][T10012] device veth1_vlan entered promiscuous mode [ 2988.918440][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2988.926466][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2988.934719][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2988.946322][T10012] device veth0_macvtap entered promiscuous mode [ 2988.955814][T10012] device veth1_macvtap entered promiscuous mode [ 2988.970933][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2988.983125][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2988.994331][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2989.009852][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2989.019897][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2989.032902][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2989.042725][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2989.053508][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2989.063489][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 2989.074052][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2989.085479][T10012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2989.095586][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2989.108190][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2989.117891][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2989.129329][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2989.140053][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2989.150878][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2989.162908][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2989.173800][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2989.183730][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2989.194285][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2989.205111][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 2989.217040][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2989.232462][T10012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2989.244044][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2989.316810][ T6671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2989.339900][ T6671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2989.356140][T18319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2989.364451][T18319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2989.373134][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2989.380906][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2989.426071][T10018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2989.437647][T10018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:06 executing program 5: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) 08:53:06 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x2600000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:06 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x6000, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syncfs(r3) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:53:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x42180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x800000000000008, 0xfb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1, 0x0, 0x92, 0x2000, 0x6, 0x0, 0x3, 0x0, 0x0, 0x200000000000, 0xfffffffffffffffd, 0x0, 0xc0a], 0x2000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b9e40b0000b800680000ba000000000f300f59542e6666b8ae000f00d8b839f07c710f23d00f21f835300000010f23f8f30f0965660f3880810000008066baf80cb8be0c648aef66bafc0c66b8080066ef66ba410066edb8010000000f01c166ba410066ed", 0x65}], 0x1, 0x0, &(0x7f0000000100)=[@cstype0={0x4, 0x9}, @dstype3={0x7, 0x1}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="f5211b3ce49db6271f257057d47a40f07bffa876988d932ee2f3cd66f710bb7e16b53ca5757ecb2315ba2dba3ee420c3e2409a6fc5e1e14876d6e9aa7d1018534469049163c385969ea5fadc69040a407a26465fc6246fe6bffe4b6c8aa52caa459cbe8452c0cdac6d815fa78c"]) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5000940b, &(0x7f0000000440)={{r1}, "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"}) 08:53:06 executing program 1: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010010000100000018000000", @ANYRES32, @ANYRESHEX=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x214100, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f3266b92802000066b80500000066ba000000000f30f266f2360f09b81a008ec066b9a50b000066b80400000066ba000000000f30520fc77cbfbf02e70f8e000066b9800000c00f326635008000000f30b810018ed0", 0x56}], 0x1, 0x7c, &(0x7f0000000000), 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x481c3, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000001c0)="66660f060f01c366baf80cb8c86f858aef66bafc0cb85728ffffef260f211d6665f30fc730b9fc0800000f3266b831000f00d80f015e0b670f2055b9800000c00f3235000100000f87", 0x49}], 0x1, 0x0, &(0x7f0000000240), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2989.787045][T10023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2989.788604][T10025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2989.804892][T10032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2989.865882][T10024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2989.949914][T10036] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:53:06 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x2700000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:06 executing program 1: pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat2(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f00000001c0)={0x6, "027bf94070d6f75c93c90cecde082a8c263ad546955976d6db47ace72d23d8b3", 0x1, 0x2, 0x8000, 0x5, 0x2, 0x4, 0x4, 0xd}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=ANY=[@ANYBLOB="b0b00100080211000001fffffffffffff8bb4dd83ab3c6c60e008180010003005700dd92376775a945c6d55712662fd481f861aba62b36c25b294fcfd870f018a947b62fc78fa6d76dd49123dbb1624d8ce130a7192dd65af27515879d650ac37f545e9edd92dae459e2d3167e9d17570d915e52153a625765495777221b8b97aea5748753d4f9200140ba622bef2bae1d6185686a4d08c009395866b13c88f11a2acfa1cf07e190a72b10ba15000000000000000000"], 0xb6) syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x2ea) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cts={{}, {0x8}}, 0xa) syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000940)=@data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x40}, @broadcast, @broadcast, @initial, {0xd, 0x7f}}, {0x6, 0x1, 0x1, 0x0, 0x9}}, {@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x9}, @random="b33714df5c9a", @device_a, @initial, {0x1}}, {0x9, 0x1, 0x2, 0x1, 0x2}}}, @a_msdu=[{@device_b, @device_b, 0x95, "2671c2e8f7aa714aa014e4867001382ba7c16f6bff5f5aa96588c1a0163249607ce3b5ee63de76ba23e67e97f181ca03cf6c336ec42af99a51ff774bfdb71379f7e9af3204b68083526f6f0f106096d205e838fe4aff9ef1f13a679b8590a38a60271ca90ebe57cec0d9bd691d473860b18cafdfac31ba13221ebdebf07a39c5ccb134068411402c5e7ad0bf86447a14bec91721c7"}, {@broadcast, @broadcast, 0x8a, "d2580530805354ab9da68fa562a8fd44da1fe23e9a2fae9fc31473aef3454c8a2af19e742683dd5192d8b978249df54e8d76ac1c0ce9795dc00c5c8f2a5bed04fe40dda6d99f67fbddd50a91bd9179a92682f08bdab5e884e7e6177170a8a8ef0b26e3e9d626505eb13d9b1731fc1cdc244ca2237bf6f7d1a91290f2bb0b93c81331c8a8aae8053c06df"}, {@broadcast, @device_a, 0x24, "f9e9ed284db711034e0f837ae1f1b46357548e4e14940fbb4b3b99505134709894d0c1d3"}, {@device_a, @broadcast, 0x16, "d30bb865b23f30a41ddbc65a4b97fb9578545de80056"}, {@device_b, @broadcast, 0xa, "bba0c3046d321bc7baea"}, {@device_b, @device_b, 0x1000, "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"}]}, 0x11f0) 08:53:06 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x64) [ 2990.144038][ T9185] Bluetooth: hci1: command 0x0409 tx timeout 08:53:06 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2990.230844][T10038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.246344][T10039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.259207][T10041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.285086][T10041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.285316][T10044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.317672][T10041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.336796][T10045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.352014][T10041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:07 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x2800000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:07 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x64) [ 2990.642340][T10048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.656264][T10046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:07 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x27}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:07 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2990.739230][T10051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:07 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x23}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2990.781634][T10053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.797552][T10052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:07 executing program 2: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0b3a1bc79725d67b005f4b3c40b12d07c69d507e5d890b00"], 0xa) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @random="7d19b50fc06d", {0xf, 0x831}}, @ver_80211n={0x0, 0x3b99, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, 0x0, 0xd, @void, [{0xdd, 0x71, "cf6e635ee22f223eb777502958efb00dc14d77ef4816625630496a1053d8455533ad9f88e5b1dbc91382787ece3051ca5cfa608781c72711cb272c96385fe19647c7a6ee33210ed271125a50038455996785ab68168cfb3c876374f3c497290e9cb6ac3d3e74d6a13f0c9f8687a562b984"}]}, 0x95) [ 2990.840177][T10055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.890285][T10057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.903834][T10057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.921786][T10057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:07 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x64) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x64) (async) 08:53:07 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x2900000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2991.002235][T10060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.006280][T10058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:07 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x27}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:07 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x9, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2991.135005][T10064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.162700][T10066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000100)={0x8001, 0x7ff}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="440f20c0663501000000440f22c0f2f20f01bc0c00670f01c30f20c06635020000000f22c0360fc79cdcbdf30f1adf66b91202000066b8b978ebda66ba4a18aa390f300f01d13ef30faeef66b854c900000f23d80f21f86635c00000900f23f8", 0x60}], 0x1, 0x20, &(0x7f0000000100), 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2991.176029][T10065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:08 executing program 2: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0b3a1bc79725d67b005f4b3c40b12d07c69d507e5d890b00"], 0xa) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @random="7d19b50fc06d", {0xf, 0x831}}, @ver_80211n={0x0, 0x3b99, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, 0x0, 0xd, @void, [{0xdd, 0x71, "cf6e635ee22f223eb777502958efb00dc14d77ef4816625630496a1053d8455533ad9f88e5b1dbc91382787ece3051ca5cfa608781c72711cb272c96385fe19647c7a6ee33210ed271125a50038455996785ab68168cfb3c876374f3c497290e9cb6ac3d3e74d6a13f0c9f8687a562b984"}]}, 0x95) 08:53:08 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x3f00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2991.283266][T10072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.298796][T10072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.312688][T10072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:08 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000340)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_b, @device_a, {0x0, 0x2}}, @random="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"}, 0x3c7) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x9}, @device_b, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x2}}}, 0x14) [ 2991.413116][T10074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.423637][T10076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.441256][T10076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:08 executing program 1: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x27}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2991.454738][T10076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:08 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0xa, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2991.507686][T10078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.559160][T10080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.589436][T10079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:08 executing program 2: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0b3a1bc79725d67b005f4b3c40b12d07c69d507e5d890b00"], 0xa) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @random="7d19b50fc06d", {0xf, 0x831}}, @ver_80211n={0x0, 0x3b99, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, 0x0, 0xd, @void, [{0xdd, 0x71, "cf6e635ee22f223eb777502958efb00dc14d77ef4816625630496a1053d8455533ad9f88e5b1dbc91382787ece3051ca5cfa608781c72711cb272c96385fe19647c7a6ee33210ed271125a50038455996785ab68168cfb3c876374f3c497290e9cb6ac3d3e74d6a13f0c9f8687a562b984"}]}, 0x95) 08:53:08 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x4800000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2991.690674][T10082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.716629][T10082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.729863][T10082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:08 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000340)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_b, @device_a, {0x0, 0x2}}, @random="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"}, 0x3c7) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x9}, @device_b, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x2}}}, 0x14) [ 2991.775412][T10084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000000)={0x10000, 0x0, [0x4, 0x4, 0xe2, 0x100, 0x3, 0xffffffffffffffff, 0x1]}) [ 2991.821689][T10086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.853839][T10086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.874360][T10086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:08 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0xb, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2991.988059][T10092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000100)={0x74, 0x0, 0x15}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="f7ffffff000000002e2f66696c653000ab469dc73f0d3042f495749a8675e50b4e78c752457b62c99281b5c91eff3e28adcad9d704f070a280a4"]) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000240)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x204}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000000)={0x3607}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2992.032337][T10091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:09 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@rts={{}, {}, @broadcast, @broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@pspoll, 0x10) 08:53:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000000)={0x10000, 0x0, [0x4, 0x4, 0xe2, 0x100, 0x3, 0xffffffffffffffff, 0x1]}) 08:53:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x4c00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:09 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000340)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_b, @device_a, {0x0, 0x2}}, @random="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"}, 0x3c7) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x9}, @device_b, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x2}}}, 0x14) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000340)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_b, @device_a, {0x0, 0x2}}, @random="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"}, 0x3c7) (async) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@bar={{}, {0x9}, @device_b, @device_b, @compressed={{0x0, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x2}}}, 0x14) (async) [ 2992.187925][T10095] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2992.223135][ T9186] Bluetooth: hci1: command 0x041b tx timeout [ 2992.279838][T10101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.286195][T10102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.324067][T10105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.344056][T10102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.345989][T10105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.362865][T10102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:09 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x10, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2992.390836][T10107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.408458][T10102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.419245][T10108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.446274][T10109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.473474][T10112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.502401][T10111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000000)={0x10000, 0x0, [0x4, 0x4, 0xe2, 0x100, 0x3, 0xffffffffffffffff, 0x1]}) 08:53:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x6000000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 2992.695413][T10118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:09 executing program 5: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0xfffffffffffffd2c) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x5}, @device_b}, 0x10) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfc) 08:53:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r6, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 08:53:09 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x11, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:09 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@rts={{}, {}, @broadcast, @broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@pspoll, 0x10) [ 2992.862240][T10120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.892254][T10125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.897765][T10127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.902232][T10120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.943089][T10123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.963403][T10125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2992.991217][T10125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:09 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x6000000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:09 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x6800000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:09 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2993.174145][T10135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.198245][T10137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:10 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:53:10 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x18, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:10 executing program 5: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0xfffffffffffffd2c) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x5}, @device_b}, 0x10) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfc) 08:53:10 executing program 4: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@rts={{}, {}, @broadcast, @broadcast}, 0x10) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@pspoll, 0x10) 08:53:10 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) [ 2993.361017][T10142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.379649][T10147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.384099][T10146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.409396][T10147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.428023][T10146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.428060][T10141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.450814][T10147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:10 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:53:10 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x6c00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:10 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8400070008020211000018baab280104e0f70f00"], 0x14) 08:53:10 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2993.576626][T10156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.583883][T10155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.602398][T10156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:10 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:10 executing program 5: syz_80211_inject_frame(&(0x7f0000000040), 0x0, 0xfffffffffffffd2c) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x5}, @device_b}, 0x10) (async) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfc) 08:53:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:53:10 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2993.789215][T10164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.823956][T10165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:10 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2993.845647][T10170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2993.873276][T10167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:10 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x7400000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:10 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8400070008020211000018baab280104e0f70f00"], 0x14) [ 2993.967325][T10177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.004542][T10179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:10 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2994.022410][T10179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:10 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:10 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @device_b, @random="e787c67c9f0c", {0x0, 0x2a}}, 0x7ff, @default, 0x8, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x24}, {0x5}, {0x1b}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x1, 0x0, {0x3516, 0x81, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0xfffffffb, 0x1f}}, @void, @void, [{0xdd, 0x77, "343d1a83669c2e2f8072e02815a3c2e133a3640dc6a3be5f2132142090f8f31ddf834c27258b0fe09ff15800ab9d18ad852a1c34d41532840983730ca7c5827f374e7d7007eafdff3e1882fca39e16360d4def2b0cbad5566dcf979037bfee9695781aed4f42efad23b761cf7d6ecf7d4f4db012ee5ef1"}, {0xdd, 0xa0, "0c01f3b15ad5786c2470aacf8bbb9998a07a1b31e18ba51a15d7a7e70ce6db345a2f73305999c1c55d6b94048e4b3dcad2ba56acbb2c2a03523a60fb8bcaf8df9ee9605cfda481af1e654b77374a04c029a0efb45c22c90d9b2c988fa95f53b757b906f808ba83f0f7fff6080f055096ce405eb9cb38e5afb6d6db1fa4c7fcf92da09721856493781e0dd9d2a1aa816c42ca2decb727374373e6f936010ad83a"}]}, 0x168) 08:53:10 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x2}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2994.197983][T10185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.224180][T10185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.251886][T10190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.270621][T10189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.293293][ T9186] Bluetooth: hci1: command 0x040f tx timeout 08:53:11 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x7a00000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:11 executing program 2: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8400070008020211000018baab280104e0f70f00"], 0x14) [ 2994.382464][T10192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.390999][T10196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.416087][T10196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:11 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x11}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:11 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @device_b, @random="e787c67c9f0c", {0x0, 0x2a}}, 0x7ff, @default, 0x8, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x24}, {0x5}, {0x1b}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x1, 0x0, {0x3516, 0x81, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0xfffffffb, 0x1f}}, @void, @void, [{0xdd, 0x77, "343d1a83669c2e2f8072e02815a3c2e133a3640dc6a3be5f2132142090f8f31ddf834c27258b0fe09ff15800ab9d18ad852a1c34d41532840983730ca7c5827f374e7d7007eafdff3e1882fca39e16360d4def2b0cbad5566dcf979037bfee9695781aed4f42efad23b761cf7d6ecf7d4f4db012ee5ef1"}, {0xdd, 0xa0, "0c01f3b15ad5786c2470aacf8bbb9998a07a1b31e18ba51a15d7a7e70ce6db345a2f73305999c1c55d6b94048e4b3dcad2ba56acbb2c2a03523a60fb8bcaf8df9ee9605cfda481af1e654b77374a04c029a0efb45c22c90d9b2c988fa95f53b757b906f808ba83f0f7fff6080f055096ce405eb9cb38e5afb6d6db1fa4c7fcf92da09721856493781e0dd9d2a1aa816c42ca2decb727374373e6f936010ad83a"}]}, 0x168) 08:53:11 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x3}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:11 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x9effffff00000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:53:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2994.791266][T10200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.800441][T10204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.813429][T10206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2994.849245][T10210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.852352][T10211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.864049][T10199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2994.887187][T10209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:11 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:12 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x11}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:12 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xf0ffffff00000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:12 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:12 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x4}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:12 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @device_b, @random="e787c67c9f0c", {0x0, 0x2a}}, 0x7ff, @default, 0x8, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x24}, {0x5}, {0x1b}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x1, 0x0, {0x3516, 0x81, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0xfffffffb, 0x1f}}, @void, @void, [{0xdd, 0x77, "343d1a83669c2e2f8072e02815a3c2e133a3640dc6a3be5f2132142090f8f31ddf834c27258b0fe09ff15800ab9d18ad852a1c34d41532840983730ca7c5827f374e7d7007eafdff3e1882fca39e16360d4def2b0cbad5566dcf979037bfee9695781aed4f42efad23b761cf7d6ecf7d4f4db012ee5ef1"}, {0xdd, 0xa0, "0c01f3b15ad5786c2470aacf8bbb9998a07a1b31e18ba51a15d7a7e70ce6db345a2f73305999c1c55d6b94048e4b3dcad2ba56acbb2c2a03523a60fb8bcaf8df9ee9605cfda481af1e654b77374a04c029a0efb45c22c90d9b2c988fa95f53b757b906f808ba83f0f7fff6080f055096ce405eb9cb38e5afb6d6db1fa4c7fcf92da09721856493781e0dd9d2a1aa816c42ca2decb727374373e6f936010ad83a"}]}, 0x168) [ 2995.243620][T10228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2995.256268][T10230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2995.270740][T10236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2995.296809][T10237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2995.307750][T10229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2995.321365][T10233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2995.334192][T10237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:12 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x204}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f00000001c0)={0x980, r3}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="440f01c9c40185f5d9b9a70a0000b8f7000000ba000000000f303645a5c744240000000000c744240200200000c7442406000000000f011c2466430fc7758cf00fc70a430f01c56565640f08b9800000c00f3235002000000f30", 0x5a}], 0x1, 0x28, &(0x7f0000000140)=[@cstype0={0x4, 0xe}, @dstype0={0x6, 0x1}], 0x2) r7 = creat(&(0x7f0000000180)='./file0\x00', 0x20) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 08:53:12 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:12 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xfcfdffff00000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:12 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x5}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:12 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac=@device_a={0x8, 0x2, 0x11, 0x0, 0x0, 0x11}}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2995.637976][T10242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1820, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x8cc, 0x8, 0x0, 0x1, [{0x4e8, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2e}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1993759ff18206d398b67486bc348a0b848e4f811770649e748e8ef38aed61ed"}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xd45b49a}}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e01d6262e5d6afc4d822da3c58cc59f02fb8d4c5a0dfcb1c1a28b3c26a626b96"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "de0cfb82a75db254eb8a6b39fc249a17e88abdf4692430a00f7bce4c2f86ab58"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2b8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x200, @mcast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @private1, 0x5}}, @WGPEER_A_ALLOWEDIPS={0x220, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7c2b51a5e6d3496ec6c5bee6e2f549eff282ad8920e5e560a80f3cc36604d6f"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}}]}]}, @WGDEVICE_A_PEERS={0x37c, 0x8, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "833613a2e355a8e91c2965042ebdf1dc5922a121c85b846ac64fae1d42ab6c54"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @private0, 0xfffffff7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @loopback, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xec, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}]}, {0x19c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x174, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x401}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffff}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2f5}, @WGDEVICE_A_PEERS={0xb74, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8c31a12b6a34cf7d2806f8c843838e54c990f601e97b50ec52913e838adc28e4"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8861782b5473028d9c8425ff05cf2e7df3c994bc84ea0d7116f9a7389dd3efb2"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5de3eaad0cb3d8fa9bc01c12f976884e8c3801cc330e10e5d14bd03847a05de8"}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "128f51fe864000e1c5e3c5242f12bf1a982baee1c9c59cd9b7b5415028792fb9"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "046df34e8ce9338187d6f0348e63f3e21407c8df91544c91939f6915f055f8dd"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffe4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c854bcac3d971a9882d5bf19e6ba84be38ab6ff436a082e57bae96444cd0b794"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "755eba27fe413968351267d929e09766b87913d13414754350665570a1c37147"}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e9cb3c288cf9ef2e6de4e63ecf7b98aa7ae38f335b4fe3a49500ba6d5f375aff"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @loopback, 0xb4}}]}, {0x8e0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x83}}]}]}, @WGPEER_A_ALLOWEDIPS={0x5d4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf3}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb5}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4abf70e9e23a6b6b00b5aff2802c3aa233f3443d453bca219b2a978c7f8a5acb"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfac}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffe}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x1820}, 0x1, 0x0, 0x0, 0x44}, 0x8040) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) [ 2995.698020][T10247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2995.730162][T10246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:12 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9, 0x0, 0xffffffffffffffff}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2995.753799][T10250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2995.772387][T10248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2995.780778][T10252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2995.810093][T10244] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:53:12 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[0xf4, 0x400, 0x4], 0x3, 0x4c8af47725b133c9}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:12 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xfcffffff00000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:12 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2995.999540][T10262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:12 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x6}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x2c}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) (rerun: 64) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1820, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x8cc, 0x8, 0x0, 0x1, [{0x4e8, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2e}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1993759ff18206d398b67486bc348a0b848e4f811770649e748e8ef38aed61ed"}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xd45b49a}}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e01d6262e5d6afc4d822da3c58cc59f02fb8d4c5a0dfcb1c1a28b3c26a626b96"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "de0cfb82a75db254eb8a6b39fc249a17e88abdf4692430a00f7bce4c2f86ab58"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2b8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x200, @mcast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @private1, 0x5}}, @WGPEER_A_ALLOWEDIPS={0x220, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7c2b51a5e6d3496ec6c5bee6e2f549eff282ad8920e5e560a80f3cc36604d6f"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}}]}]}, @WGDEVICE_A_PEERS={0x37c, 0x8, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "833613a2e355a8e91c2965042ebdf1dc5922a121c85b846ac64fae1d42ab6c54"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @private0, 0xfffffff7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @loopback, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xec, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}]}, {0x19c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x174, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x401}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffff}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2f5}, @WGDEVICE_A_PEERS={0xb74, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8c31a12b6a34cf7d2806f8c843838e54c990f601e97b50ec52913e838adc28e4"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8861782b5473028d9c8425ff05cf2e7df3c994bc84ea0d7116f9a7389dd3efb2"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5de3eaad0cb3d8fa9bc01c12f976884e8c3801cc330e10e5d14bd03847a05de8"}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "128f51fe864000e1c5e3c5242f12bf1a982baee1c9c59cd9b7b5415028792fb9"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "046df34e8ce9338187d6f0348e63f3e21407c8df91544c91939f6915f055f8dd"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffe4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c854bcac3d971a9882d5bf19e6ba84be38ab6ff436a082e57bae96444cd0b794"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "755eba27fe413968351267d929e09766b87913d13414754350665570a1c37147"}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e9cb3c288cf9ef2e6de4e63ecf7b98aa7ae38f335b4fe3a49500ba6d5f375aff"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @loopback, 0xb4}}]}, {0x8e0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x83}}]}]}, @WGPEER_A_ALLOWEDIPS={0x5d4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf3}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb5}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4abf70e9e23a6b6b00b5aff2802c3aa233f3443d453bca219b2a978c7f8a5acb"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfac}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffe}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x1820}, 0x1, 0x0, 0x0, 0x44}, 0x8040) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) [ 2996.095512][T10267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2996.108289][T10266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x200000, 0x5}) 08:53:12 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x4}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2996.181274][T10270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2996.220443][T10274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2996.242197][T10273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:13 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xfeffffff00000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2996.359883][T10283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2996.373317][ T9185] Bluetooth: hci1: command 0x0419 tx timeout 08:53:13 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x7}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x2c}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) (rerun: 64) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1820, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x8cc, 0x8, 0x0, 0x1, [{0x4e8, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x15}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2e}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1993759ff18206d398b67486bc348a0b848e4f811770649e748e8ef38aed61ed"}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xd45b49a}}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e01d6262e5d6afc4d822da3c58cc59f02fb8d4c5a0dfcb1c1a28b3c26a626b96"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "de0cfb82a75db254eb8a6b39fc249a17e88abdf4692430a00f7bce4c2f86ab58"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2b8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x200, @mcast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @private1, 0x5}}, @WGPEER_A_ALLOWEDIPS={0x220, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7c2b51a5e6d3496ec6c5bee6e2f549eff282ad8920e5e560a80f3cc36604d6f"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_FLAGS={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff9}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}}]}]}, @WGDEVICE_A_PEERS={0x37c, 0x8, 0x0, 0x1, [{0xcc, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "833613a2e355a8e91c2965042ebdf1dc5922a121c85b846ac64fae1d42ab6c54"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @private0, 0xfffffff7}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x0, @loopback, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xec, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0xcc, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}]}, {0x19c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x174, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x401}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xffff}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x2f5}, @WGDEVICE_A_PEERS={0xb74, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8c31a12b6a34cf7d2806f8c843838e54c990f601e97b50ec52913e838adc28e4"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8861782b5473028d9c8425ff05cf2e7df3c994bc84ea0d7116f9a7389dd3efb2"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5de3eaad0cb3d8fa9bc01c12f976884e8c3801cc330e10e5d14bd03847a05de8"}]}, {0x74, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "128f51fe864000e1c5e3c5242f12bf1a982baee1c9c59cd9b7b5415028792fb9"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "046df34e8ce9338187d6f0348e63f3e21407c8df91544c91939f6915f055f8dd"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xffe4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c854bcac3d971a9882d5bf19e6ba84be38ab6ff436a082e57bae96444cd0b794"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8001}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "755eba27fe413968351267d929e09766b87913d13414754350665570a1c37147"}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @remote}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e9cb3c288cf9ef2e6de4e63ecf7b98aa7ae38f335b4fe3a49500ba6d5f375aff"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x4, @loopback, 0xb4}}]}, {0x8e0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x83}}]}]}, @WGPEER_A_ALLOWEDIPS={0x5d4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf3}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xb5}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "4abf70e9e23a6b6b00b5aff2802c3aa233f3443d453bca219b2a978c7f8a5acb"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfac}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfffe}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFINDEX={0x8}]}, 0x1820}, 0x1, 0x0, 0x0, 0x44}, 0x8040) (async) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) [ 2996.456243][T10287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2996.470432][T10286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:13 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:13 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2996.539873][T10292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 08:53:13 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xff0f000000000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:13 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:13 executing program 2: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x1}, @device_b, @from_mac}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="1088f700ffffffffffff0802110000015050505050503a00080049c102001b0001000105e0800685ec2d1a800004000000000000000006009a000f000000010058a4000005dd7e893b0c1642e7b7f2c26397962468f66231a1b6cc9846884ed200a32559f7f93ba99ac107d831cb5ca5ec6a4d89fbe22d49c06ea816b7e13e9641f1c23462fa59c4507dde8aa7c496cb397a7d880570f4b3fa082072ea6d78416bfd324323f0a741b58ad6da39afd0c2625b1c07896a8a3f645f4558fb5fb7ecccc6c0c58a7e4ffdf2e72987c9da4ee4e28308bbbf4ae2de015f909a48caa2867c4fed4bb4b34f5bc118eef66e421ef0e492f70d7b2814ac6309e35410daeff3a053544d205b31fede1213fc6be0f983ad29e0c774bf8472a855ef2e0cc65759aa883801c71a6a0ac1a07d317161798024849f1292f77733dea8d60f04a1a85cd0be221f01e296d5c70f43aff314f30442d10e35e2b77951a08cde707e6b68ae4f711cb1524951452756d4e3bfeba9a9d0d65baab6b387c3bc02970bd7c005e10eb19d352169"], 0xc5) 08:53:13 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x8}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:13 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) 08:53:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 2997.194462][T10306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2997.221911][T10311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2997.232152][T10313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2997.247844][T10305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2997.268116][T10316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2997.320527][T10316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2997.358496][T10316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:14 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xffffffff00000000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:14 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) 08:53:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x9}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2997.639532][T10337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2997.662477][T10338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:14 executing program 2: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x1}, @device_b, @from_mac}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xc5) 08:53:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) [ 2997.689245][T10340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2997.706874][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2997.744434][T10344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2997.795409][T10344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2997.809699][T10344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 2997.854995][T10349] FAULT_INJECTION: forcing a failure. [ 2997.854995][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 2997.877388][T10349] CPU: 0 PID: 10349 Comm: syz-executor.4 Not tainted 5.17.0-rc6-syzkaller-00228-gac84e82f78cb #0 [ 2997.887938][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2997.898098][T10349] Call Trace: [ 2997.901390][T10349] [ 2997.904341][T10349] dump_stack_lvl+0xcd/0x134 [ 2997.908968][T10349] should_fail.cold+0x5/0xa [ 2997.913498][T10349] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2997.919242][T10349] should_failslab+0x5/0x10 [ 2997.923783][T10349] __kmalloc+0x72/0x450 [ 2997.927972][T10349] tomoyo_realpath_from_path+0xc3/0x620 [ 2997.933546][T10349] ? tomoyo_profile+0x42/0x50 [ 2997.938276][T10349] tomoyo_path_number_perm+0x1d5/0x590 [ 2997.943754][T10349] ? tomoyo_path_number_perm+0x18d/0x590 [ 2997.949414][T10349] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2997.955250][T10349] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2997.961285][T10349] ? __context_tracking_exit+0xb8/0xe0 [ 2997.966774][T10349] ? __fget_files+0x28c/0x470 [ 2997.971465][T10349] security_file_ioctl+0x50/0xb0 [ 2997.976446][T10349] __x64_sys_ioctl+0xb3/0x200 [ 2997.981116][T10349] do_syscall_64+0x35/0xb0 [ 2997.985524][T10349] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2997.991509][T10349] RIP: 0033:0x7f1d96e2d049 [ 2997.997214][T10349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2998.016822][T10349] RSP: 002b:00007f1d95781168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2998.025227][T10349] RAX: ffffffffffffffda RBX: 00007f1d96f40030 RCX: 00007f1d96e2d049 [ 2998.033186][T10349] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2998.041146][T10349] RBP: 00007f1d957811d0 R08: 0000000000000000 R09: 0000000000000000 [ 2998.049120][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2998.057082][T10349] R13: 00007f1d97473b1f R14: 00007f1d95781300 R15: 0000000000022000 [ 2998.065067][T10349] [ 2998.073793][T10349] ERROR: Out of memory at tomoyo_realpath_from_path. 08:53:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0xe}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:14 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) 08:53:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, 0x0) 08:53:15 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0xfffffffffffff000, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 2) 08:53:15 executing program 2: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000080)=@ctrl_frame=@cf_end={{}, {0x1}, @device_b, @from_mac}, 0x10) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xc5) [ 2998.303344][T10365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2998.316366][T10366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2998.344338][T10364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2998.354409][T10368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2998.366911][T10363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2998.384501][T10368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, 0x0) [ 2998.388058][T10358] FAULT_INJECTION: forcing a failure. [ 2998.388058][T10358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2998.424038][T10368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2998.431197][T10358] CPU: 1 PID: 10358 Comm: syz-executor.4 Not tainted 5.17.0-rc6-syzkaller-00228-gac84e82f78cb #0 [ 2998.444252][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2998.454318][T10358] Call Trace: [ 2998.457606][T10358] [ 2998.460546][T10358] dump_stack_lvl+0xcd/0x134 [ 2998.465157][T10358] should_fail.cold+0x5/0xa [ 2998.469683][T10358] _copy_from_user+0x2c/0x180 [ 2998.474385][T10358] kstrtouint_from_user+0xa8/0x190 [ 2998.479515][T10358] ? kstrtouint+0x120/0x120 [ 2998.484050][T10358] ? lock_release+0x720/0x720 [ 2998.488757][T10358] proc_fail_nth_write+0x79/0x220 [ 2998.493807][T10358] ? proc_task_getattr+0x1f0/0x1f0 [ 2998.498947][T10358] ? proc_task_getattr+0x1f0/0x1f0 [ 2998.504081][T10358] vfs_write+0x28e/0xae0 [ 2998.508357][T10358] ksys_write+0x12d/0x250 [ 2998.512737][T10358] ? __ia32_sys_read+0xb0/0xb0 [ 2998.517546][T10358] ? syscall_enter_from_user_mode+0x21/0x70 [ 2998.523473][T10358] do_syscall_64+0x35/0xb0 [ 2998.527911][T10358] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2998.533825][T10358] RIP: 0033:0x7f1d96ddfb5f [ 2998.538258][T10358] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2998.557876][T10358] RSP: 002b:00007f1d957a2160 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2998.566274][T10358] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1d96ddfb5f [ 2998.574232][T10358] RDX: 0000000000000001 RSI: 00007f1d957a21e0 RDI: 000000000000000f [ 2998.582186][T10358] RBP: 00007f1d957a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 2998.590172][T10358] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2998.598263][T10358] R13: 00007f1d97473b1f R14: 00007f1d957a2300 R15: 0000000000022000 [ 2998.606236][T10358] 08:53:15 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default=0xa, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:15 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x4c) 08:53:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, 0x0) 08:53:15 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0xf}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2998.691910][T10374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2998.720098][T10375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) [ 2998.787957][T10381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2998.826937][T10380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)) [ 2998.876704][T10383] FAULT_INJECTION: forcing a failure. [ 2998.876704][T10383] name failslab, interval 1, probability 0, space 0, times 0 [ 2998.889649][T10383] CPU: 1 PID: 10383 Comm: syz-executor.2 Not tainted 5.17.0-rc6-syzkaller-00228-gac84e82f78cb #0 [ 2998.900181][T10383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2998.910249][T10383] Call Trace: [ 2998.913538][T10383] [ 2998.916593][T10383] dump_stack_lvl+0xcd/0x134 [ 2998.921224][T10383] should_fail.cold+0x5/0xa [ 2998.925736][T10383] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2998.931470][T10383] should_failslab+0x5/0x10 [ 2998.935969][T10383] __kmalloc+0x72/0x450 [ 2998.940121][T10383] tomoyo_realpath_from_path+0xc3/0x620 [ 2998.945667][T10383] ? tomoyo_profile+0x42/0x50 [ 2998.950364][T10383] tomoyo_path_number_perm+0x1d5/0x590 [ 2998.955824][T10383] ? tomoyo_path_number_perm+0x18d/0x590 [ 2998.961483][T10383] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2998.967304][T10383] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2998.973379][T10383] ? __context_tracking_exit+0xb8/0xe0 [ 2998.978855][T10383] ? __fget_files+0x28c/0x470 [ 2998.983563][T10383] security_file_ioctl+0x50/0xb0 [ 2998.988513][T10383] __x64_sys_ioctl+0xb3/0x200 [ 2998.993201][T10383] do_syscall_64+0x35/0xb0 [ 2998.997636][T10383] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2999.003536][T10383] RIP: 0033:0x7f7a2cced049 [ 2999.007952][T10383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2999.027563][T10383] RSP: 002b:00007f7a2b662168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2999.035980][T10383] RAX: ffffffffffffffda RBX: 00007f7a2cdfff60 RCX: 00007f7a2cced049 [ 2999.043956][T10383] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 2999.051922][T10383] RBP: 00007f7a2b6621d0 R08: 0000000000000000 R09: 0000000000000000 [ 2999.059892][T10383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2999.067874][T10383] R13: 00007f7a2d333b1f R14: 00007f7a2b662300 R15: 0000000000022000 08:53:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:53:15 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x4c) socket$inet_smc(0x2b, 0x1, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x4c) (async) [ 2999.075879][T10383] [ 2999.083766][T10383] ERROR: Out of memory at tomoyo_realpath_from_path. 08:53:15 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default=0xf, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)) [ 2999.177165][T10393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2999.197042][T10394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:16 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x11}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)) [ 2999.373023][T10402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2999.394583][T10401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:16 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default=0x14, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:16 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x4c) 08:53:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (fail_nth: 1) [ 2999.587657][T10407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2999.617429][T10411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2999.619291][T10409] FAULT_INJECTION: forcing a failure. [ 2999.619291][T10409] name failslab, interval 1, probability 0, space 0, times 0 [ 2999.675135][T10409] CPU: 1 PID: 10409 Comm: syz-executor.1 Not tainted 5.17.0-rc6-syzkaller-00228-gac84e82f78cb #0 [ 2999.685677][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2999.695740][T10409] Call Trace: [ 2999.699016][T10409] [ 2999.701958][T10409] dump_stack_lvl+0xcd/0x134 [ 2999.706565][T10409] should_fail.cold+0x5/0xa [ 2999.711073][T10409] ? tomoyo_realpath_from_path+0xc3/0x620 [ 2999.716795][T10409] should_failslab+0x5/0x10 [ 2999.721301][T10409] __kmalloc+0x72/0x450 [ 2999.725481][T10409] tomoyo_realpath_from_path+0xc3/0x620 [ 2999.731033][T10409] ? tomoyo_profile+0x42/0x50 [ 2999.735716][T10409] tomoyo_path_number_perm+0x1d5/0x590 [ 2999.741174][T10409] ? tomoyo_path_number_perm+0x18d/0x590 [ 2999.746812][T10409] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2999.752622][T10409] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2999.758636][T10409] ? __context_tracking_exit+0xb8/0xe0 [ 2999.764111][T10409] ? __fget_files+0x28c/0x470 [ 2999.768797][T10409] security_file_ioctl+0x50/0xb0 [ 2999.773747][T10409] __x64_sys_ioctl+0xb3/0x200 [ 2999.778429][T10409] do_syscall_64+0x35/0xb0 [ 2999.782851][T10409] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2999.788758][T10409] RIP: 0033:0x7f4360e75049 [ 2999.793177][T10409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2999.812793][T10409] RSP: 002b:00007f435f7ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:53:16 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x12}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 2999.821207][T10409] RAX: ffffffffffffffda RBX: 00007f4360f87f60 RCX: 00007f4360e75049 [ 2999.829184][T10409] RDX: 0000000020000100 RSI: 000000004068aea3 RDI: 0000000000000004 [ 2999.837160][T10409] RBP: 00007f435f7ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2999.845129][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2999.853099][T10409] R13: 00007f43614bbb1f R14: 00007f435f7ea300 R15: 0000000000022000 [ 2999.861086][T10409] 08:53:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:53:16 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x2, 0x0) [ 2999.922675][T10415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2999.941922][T10409] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2999.950435][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (fail_nth: 2) 08:53:16 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default=0x25, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:16 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat2(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x9, 0xffff, '\x00', &(0x7f0000000000)=0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bind(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @loopback}, 0x1, 0x4, 0x0, 0x3}}, 0x80) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0043, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x940, 0x5) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000640)=ANY=[@ANYBLOB="d82de30095f97df448b0ffffffffffffffffffffffff7be5767fd8300500080211000001ffffffffffff50505050505011fcaa03601bf7d895ad186499a02f08a4b2ac044db27f15456162fa140679af40c0ebf288ceead6abcb713f17289e2a520f3d24e2893f4efe5f72e1dc808a9b5c0c8371758bd89591dd04f9764cbdc17b5df88d932a0615e17640831fc9b7be495f0f8f56f1f8e2f10a52bcea0f2aab351e21b6f2c613fc5d7a74e69d96cda63190408252beeba521ee501d47da6ca49df8da6b5b29be7d36abd9be3105cc28f65fec7e861107a663e3652950a7945b5637316469ebea5b34dbf28fa0effef8bc58521bc5398b56fb7bbd2ed520a0254f7494632695999d74f3283c44e7e7a7a37eb1d4e76cf1ed66f881a95849131339901a5ee739670f6f3054b3df6a7cfc3c3e863a2c419683a5941920239dc16a67e92f68fb7b8c62bff51e1c24939c278a8b3f537bbb5dec64010b7e6210003e07d7275d21c51431c9f43a64db48485b0ed8bf9489409d29fd32f5d8359206810ac8d5557442206ba7976e02a5ac1982ea7f3d02a0db154239f42fa32f38a62958ed98d81a0e66fc5ad7a08edee291eaa398d69639172561722ab5aa56009277101c6985d7684ddcf8efc4aa227fabe1cc6c2ded8789f95daca15df2ca198b97ce3d19490e15b72ae0389972f992abb0e53e50835258adfe8e3821b21a3f0b1352e64f319440e7de5b1d9ea7de8249b9a902df418b7c51fa3e2ce901c44d6d983a15ceafe8e8159fd1b7293316731dbe750f5eb7019a1ad3d1f4f1512f3752867671dee90c5d17366b94243ed6c3212451edfdcfa3787b5eadd28ed54d21eccc8ac991ef219bbb1af46438dd3771d030612b0ff47d83083567d00e0ec406f32c6a9b2e232c6ef5a44bc41e539cbbb425c15ee44d7952091a8a560324e6b8711a0e510aca2caf01b839b90b98fc83171ee0f15c85755620d57332e5e39f4082ec92707b0993b54298e3aad58583efb137602122508bf7a446d2586d3bf84feaac0b96ea8a272977ba4ad64b962b5f86f5ef2625ccdce600"/772], 0x30c) [ 3000.137183][T10423] FAULT_INJECTION: forcing a failure. [ 3000.137183][T10423] name failslab, interval 1, probability 0, space 0, times 0 [ 3000.154171][T10427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.178609][T10423] CPU: 0 PID: 10423 Comm: syz-executor.1 Not tainted 5.17.0-rc6-syzkaller-00228-gac84e82f78cb #0 [ 3000.183847][T10429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.189138][T10423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3000.189159][T10423] Call Trace: [ 3000.189168][T10423] [ 3000.189179][T10423] dump_stack_lvl+0xcd/0x134 [ 3000.219720][T10423] should_fail.cold+0x5/0xa [ 3000.224255][T10423] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 3000.229656][T10423] should_failslab+0x5/0x10 [ 3000.234181][T10423] __kmalloc+0x72/0x450 [ 3000.238361][T10423] tomoyo_encode2.part.0+0xe9/0x3a0 [ 3000.243590][T10423] tomoyo_encode+0x28/0x50 [ 3000.248027][T10423] tomoyo_realpath_from_path+0x186/0x620 [ 3000.253685][T10423] ? tomoyo_profile+0x42/0x50 [ 3000.255229][T10429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.258384][T10423] tomoyo_path_number_perm+0x1d5/0x590 [ 3000.258419][T10423] ? tomoyo_path_number_perm+0x18d/0x590 [ 3000.258450][T10423] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3000.285015][T10423] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3000.291053][T10423] ? __context_tracking_exit+0xb8/0xe0 [ 3000.296548][T10423] ? __fget_files+0x28c/0x470 [ 3000.301251][T10423] security_file_ioctl+0x50/0xb0 [ 3000.306216][T10423] __x64_sys_ioctl+0xb3/0x200 [ 3000.310923][T10423] do_syscall_64+0x35/0xb0 [ 3000.315360][T10423] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3000.321274][T10423] RIP: 0033:0x7f4360e75049 [ 3000.325701][T10423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3000.345411][T10423] RSP: 002b:00007f435f7ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3000.353845][T10423] RAX: ffffffffffffffda RBX: 00007f4360f87f60 RCX: 00007f4360e75049 [ 3000.361829][T10423] RDX: 0000000020000100 RSI: 000000004068aea3 RDI: 0000000000000004 [ 3000.369811][T10423] RBP: 00007f435f7ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3000.377792][T10423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 08:53:17 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x14}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3000.385776][T10423] R13: 00007f43614bbb1f R14: 00007f435f7ea300 R15: 0000000000022000 [ 3000.393776][T10423] [ 3000.429762][T10423] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3000.441053][T10432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (fail_nth: 3) [ 3000.494652][T10431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.558634][T10435] FAULT_INJECTION: forcing a failure. [ 3000.558634][T10435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3000.603039][T10435] CPU: 0 PID: 10435 Comm: syz-executor.1 Not tainted 5.17.0-rc6-syzkaller-00228-gac84e82f78cb #0 [ 3000.613601][T10435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3000.623687][T10435] Call Trace: [ 3000.626975][T10435] [ 3000.629913][T10435] dump_stack_lvl+0xcd/0x134 [ 3000.634531][T10435] should_fail.cold+0x5/0xa [ 3000.639062][T10435] _copy_from_user+0x2c/0x180 [ 3000.643767][T10435] kvm_vm_ioctl+0x377/0x22c0 [ 3000.648391][T10435] ? tomoyo_path_number_perm+0x204/0x590 [ 3000.654044][T10435] ? lock_downgrade+0x6e0/0x6e0 [ 3000.658911][T10435] ? slab_free_freelist_hook+0x8b/0x1c0 [ 3000.664507][T10435] ? kvm_unregister_device_ops+0x90/0x90 [ 3000.670171][T10435] ? kfree+0xd0/0x390 [ 3000.674177][T10435] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 3000.680445][T10435] ? tomoyo_path_number_perm+0x24e/0x590 [ 3000.686110][T10435] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3000.691944][T10435] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 3000.697980][T10435] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 3000.703902][T10435] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 3000.710181][T10435] ? do_vfs_ioctl+0x132/0x15d0 [ 3000.714998][T10435] ? vfs_fileattr_set+0xbe0/0xbe0 [ 3000.720066][T10435] ? __context_tracking_exit+0xb8/0xe0 [ 3000.725571][T10435] ? __fget_files+0x28c/0x470 [ 3000.730291][T10435] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3000.736561][T10435] ? kvm_unregister_device_ops+0x90/0x90 [ 3000.742225][T10435] __x64_sys_ioctl+0x193/0x200 [ 3000.747015][T10435] do_syscall_64+0x35/0xb0 08:53:17 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default=0x6d, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:17 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat2(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x9, 0xffff, '\x00', &(0x7f0000000000)=0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) bind(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @loopback}, 0x1, 0x4, 0x0, 0x3}}, 0x80) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async, rerun: 32) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0043, 0x0) (rerun: 32) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x940, 0x5) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000640)=ANY=[@ANYBLOB="d82de30095f97df448b0ffffffffffffffffffffffff7be5767fd8300500080211000001ffffffffffff50505050505011fcaa03601bf7d895ad186499a02f08a4b2ac044db27f15456162fa140679af40c0ebf288ceead6abcb713f17289e2a520f3d24e2893f4efe5f72e1dc808a9b5c0c8371758bd89591dd04f9764cbdc17b5df88d932a0615e17640831fc9b7be495f0f8f56f1f8e2f10a52bcea0f2aab351e21b6f2c613fc5d7a74e69d96cda63190408252beeba521ee501d47da6ca49df8da6b5b29be7d36abd9be3105cc28f65fec7e861107a663e3652950a7945b5637316469ebea5b34dbf28fa0effef8bc58521bc5398b56fb7bbd2ed520a0254f7494632695999d74f3283c44e7e7a7a37eb1d4e76cf1ed66f881a95849131339901a5ee739670f6f3054b3df6a7cfc3c3e863a2c419683a5941920239dc16a67e92f68fb7b8c62bff51e1c24939c278a8b3f537bbb5dec64010b7e6210003e07d7275d21c51431c9f43a64db48485b0ed8bf9489409d29fd32f5d8359206810ac8d5557442206ba7976e02a5ac1982ea7f3d02a0db154239f42fa32f38a62958ed98d81a0e66fc5ad7a08edee291eaa398d69639172561722ab5aa56009277101c6985d7684ddcf8efc4aa227fabe1cc6c2ded8789f95daca15df2ca198b97ce3d19490e15b72ae0389972f992abb0e53e50835258adfe8e3821b21a3f0b1352e64f319440e7de5b1d9ea7de8249b9a902df418b7c51fa3e2ce901c44d6d983a15ceafe8e8159fd1b7293316731dbe750f5eb7019a1ad3d1f4f1512f3752867671dee90c5d17366b94243ed6c3212451edfdcfa3787b5eadd28ed54d21eccc8ac991ef219bbb1af46438dd3771d030612b0ff47d83083567d00e0ec406f32c6a9b2e232c6ef5a44bc41e539cbbb425c15ee44d7952091a8a560324e6b8711a0e510aca2caf01b839b90b98fc83171ee0f15c85755620d57332e5e39f4082ec92707b0993b54298e3aad58583efb137602122508bf7a446d2586d3bf84feaac0b96ea8a272977ba4ad64b962b5f86f5ef2625ccdce600"/772], 0x30c) [ 3000.751457][T10435] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3000.757380][T10435] RIP: 0033:0x7f4360e75049 [ 3000.761811][T10435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3000.781437][T10435] RSP: 002b:00007f435f7ea168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3000.789873][T10435] RAX: ffffffffffffffda RBX: 00007f4360f87f60 RCX: 00007f4360e75049 08:53:17 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x15}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3000.797868][T10435] RDX: 0000000020000100 RSI: 000000004068aea3 RDI: 0000000000000004 [ 3000.805856][T10435] RBP: 00007f435f7ea1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3000.813837][T10435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3000.821825][T10435] R13: 00007f43614bbb1f R14: 00007f435f7ea300 R15: 0000000000022000 [ 3000.829835][T10435] [ 3000.852400][T10439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.864304][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.879204][T10441] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.890190][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.903079][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.923398][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.934253][T10443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.937496][T10442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x2, 0x0) [ 3000.960658][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.973363][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3000.986179][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.000415][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (fail_nth: 4) [ 3001.011857][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.034579][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.051501][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x10, 0x0) [ 3001.075630][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.104071][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.122515][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.134365][T10448] FAULT_INJECTION: forcing a failure. [ 3001.134365][T10448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3001.149158][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.166708][T10448] CPU: 0 PID: 10448 Comm: syz-executor.1 Not tainted 5.17.0-rc6-syzkaller-00228-gac84e82f78cb #0 [ 3001.177239][T10448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3001.179953][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.187300][T10448] Call Trace: [ 3001.187312][T10448] [ 3001.187324][T10448] dump_stack_lvl+0xcd/0x134 [ 3001.187362][T10448] should_fail.cold+0x5/0xa [ 3001.187395][T10448] _copy_to_user+0x2c/0x150 [ 3001.216847][T10448] simple_read_from_buffer+0xcc/0x160 [ 3001.222247][T10448] proc_fail_nth_read+0x187/0x220 [ 3001.224848][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.227295][T10448] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 3001.227333][T10448] ? security_file_permission+0xab/0xd0 [ 3001.248288][T10448] ? proc_tid_comm_permission+0x1b0/0x1b0 [ 3001.254028][T10448] vfs_read+0x1b5/0x600 [ 3001.256615][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.258202][T10448] ksys_read+0x12d/0x250 [ 3001.258237][T10448] ? vfs_write+0xae0/0xae0 [ 3001.258267][T10448] ? syscall_enter_from_user_mode+0x21/0x70 [ 3001.282485][T10448] do_syscall_64+0x35/0xb0 [ 3001.286926][T10448] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3001.288667][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.292836][T10448] RIP: 0033:0x7f4360e27bfc [ 3001.292862][T10448] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3001.292889][T10448] RSP: 002b:00007f435f7ea160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3001.292915][T10448] RAX: ffffffffffffffda RBX: 00007f4360f87f60 RCX: 00007f4360e27bfc [ 3001.311717][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.326605][T10448] RDX: 000000000000000f RSI: 00007f435f7ea1e0 RDI: 0000000000000006 [ 3001.326627][T10448] RBP: 00007f435f7ea1d0 R08: 0000000000000000 R09: 0000000000000000 08:53:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x10, 0x0) 08:53:18 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default=0xc0, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:18 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x16}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3001.326645][T10448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3001.326661][T10448] R13: 00007f43614bbb1f R14: 00007f435f7ea300 R15: 0000000000022000 [ 3001.326696][T10448] [ 3001.413111][T10455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.490800][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.516518][T10460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.533487][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.549615][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.573838][T10459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x541b, 0x0) 08:53:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3001.586434][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.607865][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.635306][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.649694][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.661213][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.700996][T10438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x5421, 0x0) 08:53:18 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default=0xec0, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3001.767884][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.807531][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.824277][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.830972][T10471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.841334][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3001.870308][T10440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x541b, 0x0) 08:53:18 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat2(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x9, 0xffff, '\x00', &(0x7f0000000000)=0x2}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) bind(r1, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @loopback}, 0x1, 0x4, 0x0, 0x3}}, 0x80) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0043, 0x0) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x940, 0x5) (async) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/772], 0x30c) 08:53:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x2, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x5450, 0x0) 08:53:18 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x17}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3002.128536][T10482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3002.163307][T10477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:18 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3002.192939][T10487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x10, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3002.244020][T10486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3002.263325][T10491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x5451, 0x0) 08:53:19 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x18}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x5421, 0x0) 08:53:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x541b, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x5452, 0x0) 08:53:19 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) [ 3002.598600][T10508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:19 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x2, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x5460, 0x0) 08:53:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x5421, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3002.671301][T10512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3002.698694][T10505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3002.710710][T10516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x8933, 0x0) 08:53:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x5450, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x5451, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:19 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x3, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:19 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x19}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3003.062462][T10531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3003.095291][T10533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3003.116981][T10532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x5450, 0x0) 08:53:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xaece, 0x0) 08:53:19 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) 08:53:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x5452, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3003.198897][T10538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3003.215730][T10538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x5460, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x400448c9, 0x0) 08:53:20 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x4, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:20 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x1a}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x8933, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3003.448649][T10551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3003.470656][T10555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:20 executing program 5: syz_80211_inject_frame(&(0x7f0000000000)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) [ 3003.515685][T10554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x400448dd, 0x0) 08:53:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0xae03, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3003.662478][T10564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x5451, 0x0) 08:53:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0xae41, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:20 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x5, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x400454ca, 0x0) 08:53:20 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x1b}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3003.843379][T10573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0xaec7, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3003.941769][T10578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:20 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000840)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x6}, @from_mac=@device_b, @broadcast, @device_a, {0xf}}, {0x5, 0x1, 0x1, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @random="000ab3bd3990", @initial, {0x1}}, {0x8, 0x0, 0x3, 0x1, 0x8f}}}, @ver_80211n={0x0, 0x6, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0xcc, "a1834e1c22be44ae1acef86dd857a985f7bd6f51f401d54ee326a69710b4bbbde974ccafeb5a7d4674971c1ccb4a25a58b06ed5a2218da223fc39a6125863819702f2ce8d5bf67e12f461a7dab544410f5830de95fadfe616553f2d695d3456a571df3b94944a31f176ed4dbe183f405d5a69ece4cba91c10f34d93832edd4d1db171efddcc5803507bb304c914876cdac9ce9d3540bf1dd0953387f651819e30b2ae55b6f87643fc8c959e6942b4b24597038e14868055d9aeffda6a0a5404479b682db62c3083b463105b8"}, {@device_b, @device_a, 0xac, "9aec287259868f72cf214739b33b6f3ac911a059da9ec59c1c91275d42920048a32563e6375a213126a438b75ae2e846933176332aad74fb1c5077767cd917e82774f1201a396c7c513120cd5e4dec0dab8c571cf523d2bb9d84786585ca89926f7477a19c9de779b5ab838be0fd3559dc7eca5a0556eaf6007917fddee792447b791393cb326557ad9fc53a3edd5f46afd3673be0b862b97634d672921c310af966a0811f0f4d7ee584f6f1"}, {@broadcast, @device_b, 0x40, "2d75f0a9e68ef37dd9e517d2eae7e7ea072a531dabe9aa8a21ccb9cfd0d4faa280ea5f244429e62845b17dfa4cecb3f8a8a81a222562a8355454fc383afca117"}, {@device_a, @device_b, 0x73, "57ae1c02a746fd6248f3b982041b2161b29364781954bb134c1d612cbcc439ce3d13ee629d8a06ca9f84ddb2c56863fe162ebd4fa6971132cd6f707deed40ae865a3bc0f6aa5c905fe8cf519280bcd85910418247fbc569c74eb5260dba37f57d434535580a81c7a2f0ce058ac1d3a80b61a86"}, {@device_a, @device_a, 0x92, "9679ddee5b7dd6f59735527f05306ba83e95e5fbf1b8cb62724458113daf332b562bb334c8ca9535520fe07f25a50d9e92e76256031e255c3db60745e01ccce7274ed91a7fc5158bdb9d56c11602a1c23beae4e3682e8897098308cdb7173b0b9e0b04581717efff13848d19f0a59e770e13e1c97daf6a4a0c23a68f391a1c46503fb644d0ec61f15ec6457916093035802d"}, {@device_b, @broadcast, 0xf7, "3ef40519be50dbe079eb361aced0a001f7e7e2e89a20a965e604891ac9fe16901945bf1a1d419a1def1fe4838f089821d7ea6256f787a98d2b3d7df2c9e0b6d01c73eec33dab0d10456f454205ac9c046e918ecc4a492938f3ebcd21853e894dfd05e64603759cba5b57e969d6f2f905f8d846523718c858a42496c18014bf640e50b96679243de8c68a26db792c67ecf610e63f7561b426af046e13daa8baebaf6ebe8c32b146736beb7ef40ee35a3b1a7f0f71a4c9588251b1b0e0498ff766b129c3160b6d998d81bf7043c16233888deef3790846cf1519f2305080d12aabbb3278db3bb8b6dfdd556d5a909ce5eb4a036edd1cc310"}, {@device_a, @device_b, 0x81, "49b0aa716e8101ac442afd0cfaf473d88f80ffbda7a02482f9969836f3b363d31e05d6fbf41ea3d08c72bbec6335b6d884bd4ae976b45d6fa64363f317173c0c977b38b0b244fd4d0b8c4bdba5c665391f0af2d2ef4474220bc6e5f20a738e63fec409c7be652024f245649ee54b40092f4e4103c31c3b19d5a8a1ffa385fbdbc6"}, {@broadcast, @broadcast, 0xf, "0704a2ddafd98a7194063f6fe8ca4d"}]}, 0x4fc) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@ba={{}, {}, @broadcast, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0x4}, {0x5, 0xd5}, "2d65d21c08dc5536"}}, 0x1c) [ 3003.982550][T10577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x40049409, 0x0) [ 3004.039138][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0xaece, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3004.082436][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3004.121139][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 08:53:21 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x6, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x400448c9, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3004.289019][T10597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x5452, 0x0) 08:53:21 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x1c}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 08:53:21 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000840)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x6}, @from_mac=@device_b, @broadcast, @device_a, {0xf}}, {0x5, 0x1, 0x1, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @random="000ab3bd3990", @initial, {0x1}}, {0x8, 0x0, 0x3, 0x1, 0x8f}}}, @ver_80211n={0x0, 0x6, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0xcc, "a1834e1c22be44ae1acef86dd857a985f7bd6f51f401d54ee326a69710b4bbbde974ccafeb5a7d4674971c1ccb4a25a58b06ed5a2218da223fc39a6125863819702f2ce8d5bf67e12f461a7dab544410f5830de95fadfe616553f2d695d3456a571df3b94944a31f176ed4dbe183f405d5a69ece4cba91c10f34d93832edd4d1db171efddcc5803507bb304c914876cdac9ce9d3540bf1dd0953387f651819e30b2ae55b6f87643fc8c959e6942b4b24597038e14868055d9aeffda6a0a5404479b682db62c3083b463105b8"}, {@device_b, @device_a, 0xac, "9aec287259868f72cf214739b33b6f3ac911a059da9ec59c1c91275d42920048a32563e6375a213126a438b75ae2e846933176332aad74fb1c5077767cd917e82774f1201a396c7c513120cd5e4dec0dab8c571cf523d2bb9d84786585ca89926f7477a19c9de779b5ab838be0fd3559dc7eca5a0556eaf6007917fddee792447b791393cb326557ad9fc53a3edd5f46afd3673be0b862b97634d672921c310af966a0811f0f4d7ee584f6f1"}, {@broadcast, @device_b, 0x40, "2d75f0a9e68ef37dd9e517d2eae7e7ea072a531dabe9aa8a21ccb9cfd0d4faa280ea5f244429e62845b17dfa4cecb3f8a8a81a222562a8355454fc383afca117"}, {@device_a, @device_b, 0x73, "57ae1c02a746fd6248f3b982041b2161b29364781954bb134c1d612cbcc439ce3d13ee629d8a06ca9f84ddb2c56863fe162ebd4fa6971132cd6f707deed40ae865a3bc0f6aa5c905fe8cf519280bcd85910418247fbc569c74eb5260dba37f57d434535580a81c7a2f0ce058ac1d3a80b61a86"}, {@device_a, @device_a, 0x92, "9679ddee5b7dd6f59735527f05306ba83e95e5fbf1b8cb62724458113daf332b562bb334c8ca9535520fe07f25a50d9e92e76256031e255c3db60745e01ccce7274ed91a7fc5158bdb9d56c11602a1c23beae4e3682e8897098308cdb7173b0b9e0b04581717efff13848d19f0a59e770e13e1c97daf6a4a0c23a68f391a1c46503fb644d0ec61f15ec6457916093035802d"}, {@device_b, @broadcast, 0xf7, "3ef40519be50dbe079eb361aced0a001f7e7e2e89a20a965e604891ac9fe16901945bf1a1d419a1def1fe4838f089821d7ea6256f787a98d2b3d7df2c9e0b6d01c73eec33dab0d10456f454205ac9c046e918ecc4a492938f3ebcd21853e894dfd05e64603759cba5b57e969d6f2f905f8d846523718c858a42496c18014bf640e50b96679243de8c68a26db792c67ecf610e63f7561b426af046e13daa8baebaf6ebe8c32b146736beb7ef40ee35a3b1a7f0f71a4c9588251b1b0e0498ff766b129c3160b6d998d81bf7043c16233888deef3790846cf1519f2305080d12aabbb3278db3bb8b6dfdd556d5a909ce5eb4a036edd1cc310"}, {@device_a, @device_b, 0x81, "49b0aa716e8101ac442afd0cfaf473d88f80ffbda7a02482f9969836f3b363d31e05d6fbf41ea3d08c72bbec6335b6d884bd4ae976b45d6fa64363f317173c0c977b38b0b244fd4d0b8c4bdba5c665391f0af2d2ef4474220bc6e5f20a738e63fec409c7be652024f245649ee54b40092f4e4103c31c3b19d5a8a1ffa385fbdbc6"}, {@broadcast, @broadcast, 0xf, "0704a2ddafd98a7194063f6fe8ca4d"}]}, 0x4fc) (async) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@ba={{}, {}, @broadcast, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0x4}, {0x5, 0xd5}, "2d65d21c08dc5536"}}, 0x1c) 08:53:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x400448dd, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3004.461210][T10602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3004.513321][T10601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3004.547185][T10612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:21 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x7, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x40086602, 0x0) 08:53:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x400454ca, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3004.677779][T10618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x40186366, 0x0) 08:53:21 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x1d}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:21 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000840)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x6}, @from_mac=@device_b, @broadcast, @device_a, {0xf}}, {0x5, 0x1, 0x1, 0x0, 0x3}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @random="000ab3bd3990", @initial, {0x1}}, {0x8, 0x0, 0x3, 0x1, 0x8f}}}, @ver_80211n={0x0, 0x6, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0xcc, "a1834e1c22be44ae1acef86dd857a985f7bd6f51f401d54ee326a69710b4bbbde974ccafeb5a7d4674971c1ccb4a25a58b06ed5a2218da223fc39a6125863819702f2ce8d5bf67e12f461a7dab544410f5830de95fadfe616553f2d695d3456a571df3b94944a31f176ed4dbe183f405d5a69ece4cba91c10f34d93832edd4d1db171efddcc5803507bb304c914876cdac9ce9d3540bf1dd0953387f651819e30b2ae55b6f87643fc8c959e6942b4b24597038e14868055d9aeffda6a0a5404479b682db62c3083b463105b8"}, {@device_b, @device_a, 0xac, "9aec287259868f72cf214739b33b6f3ac911a059da9ec59c1c91275d42920048a32563e6375a213126a438b75ae2e846933176332aad74fb1c5077767cd917e82774f1201a396c7c513120cd5e4dec0dab8c571cf523d2bb9d84786585ca89926f7477a19c9de779b5ab838be0fd3559dc7eca5a0556eaf6007917fddee792447b791393cb326557ad9fc53a3edd5f46afd3673be0b862b97634d672921c310af966a0811f0f4d7ee584f6f1"}, {@broadcast, @device_b, 0x40, "2d75f0a9e68ef37dd9e517d2eae7e7ea072a531dabe9aa8a21ccb9cfd0d4faa280ea5f244429e62845b17dfa4cecb3f8a8a81a222562a8355454fc383afca117"}, {@device_a, @device_b, 0x73, "57ae1c02a746fd6248f3b982041b2161b29364781954bb134c1d612cbcc439ce3d13ee629d8a06ca9f84ddb2c56863fe162ebd4fa6971132cd6f707deed40ae865a3bc0f6aa5c905fe8cf519280bcd85910418247fbc569c74eb5260dba37f57d434535580a81c7a2f0ce058ac1d3a80b61a86"}, {@device_a, @device_a, 0x92, "9679ddee5b7dd6f59735527f05306ba83e95e5fbf1b8cb62724458113daf332b562bb334c8ca9535520fe07f25a50d9e92e76256031e255c3db60745e01ccce7274ed91a7fc5158bdb9d56c11602a1c23beae4e3682e8897098308cdb7173b0b9e0b04581717efff13848d19f0a59e770e13e1c97daf6a4a0c23a68f391a1c46503fb644d0ec61f15ec6457916093035802d"}, {@device_b, @broadcast, 0xf7, "3ef40519be50dbe079eb361aced0a001f7e7e2e89a20a965e604891ac9fe16901945bf1a1d419a1def1fe4838f089821d7ea6256f787a98d2b3d7df2c9e0b6d01c73eec33dab0d10456f454205ac9c046e918ecc4a492938f3ebcd21853e894dfd05e64603759cba5b57e969d6f2f905f8d846523718c858a42496c18014bf640e50b96679243de8c68a26db792c67ecf610e63f7561b426af046e13daa8baebaf6ebe8c32b146736beb7ef40ee35a3b1a7f0f71a4c9588251b1b0e0498ff766b129c3160b6d998d81bf7043c16233888deef3790846cf1519f2305080d12aabbb3278db3bb8b6dfdd556d5a909ce5eb4a036edd1cc310"}, {@device_a, @device_b, 0x81, "49b0aa716e8101ac442afd0cfaf473d88f80ffbda7a02482f9969836f3b363d31e05d6fbf41ea3d08c72bbec6335b6d884bd4ae976b45d6fa64363f317173c0c977b38b0b244fd4d0b8c4bdba5c665391f0af2d2ef4474220bc6e5f20a738e63fec409c7be652024f245649ee54b40092f4e4103c31c3b19d5a8a1ffa385fbdbc6"}, {@broadcast, @broadcast, 0xf, "0704a2ddafd98a7194063f6fe8ca4d"}]}, 0x4fc) syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@ba={{}, {}, @broadcast, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0x4}, {0x5, 0xd5}, "2d65d21c08dc5536"}}, 0x1c) 08:53:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x40049409, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3004.959922][T10629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3004.963218][T10631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3004.999193][T10631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3005.009123][T10628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x5460, 0x0) 08:53:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x401c5820, 0x0) 08:53:21 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x8, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3005.064467][T10635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x40086602, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3005.121899][T10640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 08:53:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4008ae61, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:22 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x1e}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:22 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000004080)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_b, @from_mac=@broadcast, {0x3, 0x9}}, @ver_80211n={0x0, 0x5, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1}}, @void, @val={0x1, 0x6, [{0x12}, {0x4, 0x1}, {0x18}, {0x24, 0x1}, {0x60, 0x1}, {0x48}]}, @void, @val={0x2d, 0x1a, {0x0, 0x1, 0x1, 0x0, {0x7, 0xa4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x6, 0x1000, 0x1f}}, @void, [{0xdd, 0xcd, "d7a8ad058be1a1500cad2a15f36370fba2b728dffabd033668cb9b18b076ff0d14d8f0420e8678b611ee60b534897b38f4ae3fabf3328f32dd8e25fa3d4427b78414fbd25f4942c6c99f7be4425afdec694b0351ad5eae7be19de30633410e6b2443a14b2424b7271b4975f95ec0f0c78d5b5f2cf873e1a6b18175c06d38daacf5feb1f9969edba0db84cbd7fa339f90a72a02dd3f7f11c9bef323755e85b67046750dcf0ecfb968ea61593e533f1e042d926e7c83830045a10c4659c8658f5f0b084ef213755a4300e541f269"}, {0xdd, 0xaf, "65753d059438dbf8346128338276cb7a62e87cf13e7d384072f40d6e04e082bb7014f820584a3aaed1e871e3bbfdbce4a981f1429401579d63ef431ad07956329d151a034ce2c04180c097e27afc98f0a4d44630f5244f8a1888b64dc9fb556509228510a826256fb435c90fae60b3b6aecfbc07d2a72c3f73e05cca6faa8cadd1f4cf5f69faadbcb1eb5eadd447d680d85a37fe624c3a66e2fde4bbea4587881023c347505e361a42baa00af10cd5"}, {0xdd, 0xfa, "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"}, {0xdd, 0x35, "9b600066d1cec9144809a26fd4936d44c9112e9377a852188f69967a2784333220f22b3b52057e86cb400af07a550433f695235b98"}, {0xdd, 0x5c, "2d6e9d92111708fd1d72a22a64211527a7df06385184d2030c7a1179acc781116876e68a9429bce65505416211b04495da9b9258bb4767cd3186a93b7cadc9cbe772d8922c6681dbecd80b880a18c83e2eaf6b930108a1035e0652d6"}, {0xdd, 0xc8, "e6cba3f23435a7c7e172d0671e8c7da86453f76ff4d5c16d2496f941103da874950ba5547510c0a099c83b07d1b07b438862a6d11ae4280835e482e1d092b6e1c803255644ae852882ca6b40866ff107f57e6d329c164915e78b796f81473d004bcc7a00be7b4ea835e74d7e312f560af09b2be9cbde8f87505cbee5110ef8f439c97dd2b21e354723f399ce36651fd4918b70c560e9d111e00315c18aa44cb33a38b79eb8c4c22b850b50cc21bee51aa0e92b53597d569e910e4136e97bc2582f69617f11295e59"}]}, 0x41b) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000003800)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @initial, @device_a, @device_a, {0x8, 0x3}}, {0x4, 0x1, 0x1, 0x0, 0xfe}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @initial, @broadcast, @from_mac=@device_b, {0x7, 0x6}}, {0x2, 0x0, 0x3, 0x1, 0x7}}}, @random="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"}, 0x841) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f00000036c0)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/84, 0x54}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000340)=""/246, 0xf6}], 0x3}, 0x5}, {{&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000940)=""/180, 0xb4}], 0x8, &(0x7f0000000a80)=""/60, 0x3c}}, {{&(0x7f0000000ac0)=@x25, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000b40)=""/102, 0x66}, {&(0x7f0000000bc0)=""/225, 0xe1}, {&(0x7f0000000cc0)=""/103, 0x67}, {&(0x7f0000000d40)=""/42, 0x2a}, {&(0x7f0000000d80)=""/88, 0x58}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/207, 0xcf}], 0x7, &(0x7f0000001f80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002f80)=@un=@abs, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003000)=""/57, 0x39}, {&(0x7f0000003040)=""/125, 0x7d}, {&(0x7f00000030c0)=""/226, 0xe2}, {&(0x7f00000031c0)=""/222, 0xde}, {&(0x7f00000032c0)=""/192, 0xc0}, {&(0x7f0000003380)=""/37, 0x25}, {&(0x7f00000033c0)=""/100, 0x64}, {&(0x7f0000003440)=""/186, 0xba}, {&(0x7f0000003500)=""/166, 0xa6}], 0x9, &(0x7f0000003680)=""/44, 0x2c}}], 0x4, 0x40002000, &(0x7f00000037c0)) [ 3005.397852][T10656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3005.436066][T10658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 08:53:22 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x9, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3005.463893][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3005.470023][T10658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4008ae6a, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3005.515317][T10662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 08:53:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x8933, 0x0) 08:53:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4010ae42, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:22 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) (async) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000004080)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_b, @from_mac=@broadcast, {0x3, 0x9}}, @ver_80211n={0x0, 0x5, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1}}, @void, @val={0x1, 0x6, [{0x12}, {0x4, 0x1}, {0x18}, {0x24, 0x1}, {0x60, 0x1}, {0x48}]}, @void, @val={0x2d, 0x1a, {0x0, 0x1, 0x1, 0x0, {0x7, 0xa4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x6, 0x1000, 0x1f}}, @void, [{0xdd, 0xcd, "d7a8ad058be1a1500cad2a15f36370fba2b728dffabd033668cb9b18b076ff0d14d8f0420e8678b611ee60b534897b38f4ae3fabf3328f32dd8e25fa3d4427b78414fbd25f4942c6c99f7be4425afdec694b0351ad5eae7be19de30633410e6b2443a14b2424b7271b4975f95ec0f0c78d5b5f2cf873e1a6b18175c06d38daacf5feb1f9969edba0db84cbd7fa339f90a72a02dd3f7f11c9bef323755e85b67046750dcf0ecfb968ea61593e533f1e042d926e7c83830045a10c4659c8658f5f0b084ef213755a4300e541f269"}, {0xdd, 0xaf, "65753d059438dbf8346128338276cb7a62e87cf13e7d384072f40d6e04e082bb7014f820584a3aaed1e871e3bbfdbce4a981f1429401579d63ef431ad07956329d151a034ce2c04180c097e27afc98f0a4d44630f5244f8a1888b64dc9fb556509228510a826256fb435c90fae60b3b6aecfbc07d2a72c3f73e05cca6faa8cadd1f4cf5f69faadbcb1eb5eadd447d680d85a37fe624c3a66e2fde4bbea4587881023c347505e361a42baa00af10cd5"}, {0xdd, 0xfa, "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"}, {0xdd, 0x35, "9b600066d1cec9144809a26fd4936d44c9112e9377a852188f69967a2784333220f22b3b52057e86cb400af07a550433f695235b98"}, {0xdd, 0x5c, "2d6e9d92111708fd1d72a22a64211527a7df06385184d2030c7a1179acc781116876e68a9429bce65505416211b04495da9b9258bb4767cd3186a93b7cadc9cbe772d8922c6681dbecd80b880a18c83e2eaf6b930108a1035e0652d6"}, {0xdd, 0xc8, "e6cba3f23435a7c7e172d0671e8c7da86453f76ff4d5c16d2496f941103da874950ba5547510c0a099c83b07d1b07b438862a6d11ae4280835e482e1d092b6e1c803255644ae852882ca6b40866ff107f57e6d329c164915e78b796f81473d004bcc7a00be7b4ea835e74d7e312f560af09b2be9cbde8f87505cbee5110ef8f439c97dd2b21e354723f399ce36651fd4918b70c560e9d111e00315c18aa44cb33a38b79eb8c4c22b850b50cc21bee51aa0e92b53597d569e910e4136e97bc2582f69617f11295e59"}]}, 0x41b) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000003800)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @initial, @device_a, @device_a, {0x8, 0x3}}, {0x4, 0x1, 0x1, 0x0, 0xfe}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @initial, @broadcast, @from_mac=@device_b, {0x7, 0x6}}, {0x2, 0x0, 0x3, 0x1, 0x7}}}, @random="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"}, 0x841) (async, rerun: 32) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f00000036c0)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/84, 0x54}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000340)=""/246, 0xf6}], 0x3}, 0x5}, {{&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000940)=""/180, 0xb4}], 0x8, &(0x7f0000000a80)=""/60, 0x3c}}, {{&(0x7f0000000ac0)=@x25, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000b40)=""/102, 0x66}, {&(0x7f0000000bc0)=""/225, 0xe1}, {&(0x7f0000000cc0)=""/103, 0x67}, {&(0x7f0000000d40)=""/42, 0x2a}, {&(0x7f0000000d80)=""/88, 0x58}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/207, 0xcf}], 0x7, &(0x7f0000001f80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002f80)=@un=@abs, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003000)=""/57, 0x39}, {&(0x7f0000003040)=""/125, 0x7d}, {&(0x7f00000030c0)=""/226, 0xe2}, {&(0x7f00000031c0)=""/222, 0xde}, {&(0x7f00000032c0)=""/192, 0xc0}, {&(0x7f0000003380)=""/37, 0x25}, {&(0x7f00000033c0)=""/100, 0x64}, {&(0x7f0000003440)=""/186, 0xba}, {&(0x7f0000003500)=""/166, 0xa6}], 0x9, &(0x7f0000003680)=""/44, 0x2c}}], 0x4, 0x40002000, &(0x7f00000037c0)) 08:53:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 08:53:22 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x21}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:22 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0xe, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4010ae67, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3005.887468][T10679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3005.922596][T10684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3005.935925][T10683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3005.942592][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3005.965876][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3005.970517][T10682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3005.997550][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4010ae68, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3006.062325][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3006.091843][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) [ 3006.140612][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3006.171665][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3006.190269][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3006.214099][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x40186366, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:23 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0xf, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:23 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x22}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3006.245445][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3006.273481][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3006.363486][T10705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3006.390436][T10686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3006.390758][T10707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3006.470849][T10706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 08:53:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x401c5820, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3007.324459][T18319] device hsr_slave_0 left promiscuous mode [ 3007.330705][T18319] device hsr_slave_1 left promiscuous mode [ 3007.337843][T18319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3007.345591][T18319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3007.354981][T18319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3007.362364][T18319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3007.372520][T18319] device bridge_slave_1 left promiscuous mode [ 3007.378937][T18319] bridge0: port 2(bridge_slave_1) entered disabled state [ 3007.387461][T18319] device bridge_slave_0 left promiscuous mode [ 3007.394537][T18319] bridge0: port 1(bridge_slave_0) entered disabled state [ 3007.406590][T18319] device veth1_macvtap left promiscuous mode [ 3007.412600][T18319] device veth0_macvtap left promiscuous mode [ 3007.419111][T18319] device veth1_vlan left promiscuous mode [ 3007.427765][T18319] device veth0_vlan left promiscuous mode [ 3007.609848][T18319] team0 (unregistering): Port device team_slave_1 removed [ 3007.626495][T18319] team0 (unregistering): Port device team_slave_0 removed [ 3007.639530][T18319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3007.662089][T18319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3007.732383][T18319] bond0 (unregistering): Released all slaves [ 3009.183542][ T9299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3009.192312][ T9299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3009.200031][ T9299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3009.210720][ T9299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3009.218545][ T9299] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3009.225788][ T9299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3009.318416][T10718] chnl_net:caif_netlink_parms(): no params data found [ 3009.361548][T10718] bridge0: port 1(bridge_slave_0) entered blocking state [ 3009.369193][T10718] bridge0: port 1(bridge_slave_0) entered disabled state [ 3009.376989][T10718] device bridge_slave_0 entered promiscuous mode [ 3009.386527][T10718] bridge0: port 2(bridge_slave_1) entered blocking state [ 3009.393866][T10718] bridge0: port 2(bridge_slave_1) entered disabled state [ 3009.401577][T10718] device bridge_slave_1 entered promiscuous mode [ 3009.425703][T10718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3009.436595][T10718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3009.462203][T10718] team0: Port device team_slave_0 added [ 3009.471389][T10718] team0: Port device team_slave_1 added [ 3009.491379][T10718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3009.499298][T10718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3009.525626][T10718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3009.539010][T10718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3009.546132][T10718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3009.573762][T10718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3009.602600][T10718] device hsr_slave_0 entered promiscuous mode [ 3009.609738][T10718] device hsr_slave_1 entered promiscuous mode [ 3009.618161][T10718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3009.625752][T10718] Cannot create hsr debugfs directory [ 3009.696505][T10718] bridge0: port 2(bridge_slave_1) entered blocking state [ 3009.703620][T10718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3009.710894][T10718] bridge0: port 1(bridge_slave_0) entered blocking state [ 3009.718001][T10718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3009.767811][T10718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3009.784805][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3009.792815][T13117] bridge0: port 1(bridge_slave_0) entered disabled state [ 3009.800846][T13117] bridge0: port 2(bridge_slave_1) entered disabled state [ 3009.809103][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3009.828388][T10718] 8021q: adding VLAN 0 to HW filter on device team0 [ 3009.839111][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3009.847870][T13117] bridge0: port 1(bridge_slave_0) entered blocking state [ 3009.854991][T13117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3009.870260][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3009.878888][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state [ 3009.886016][ T9186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3009.907174][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3009.917032][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3009.934810][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3009.943429][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3009.951641][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3009.965592][T10718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3009.987023][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3009.994567][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3010.010925][T10718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3010.026715][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3010.046238][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3010.055017][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3010.062590][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3010.072971][T10718] device veth0_vlan entered promiscuous mode [ 3010.084257][T10718] device veth1_vlan entered promiscuous mode [ 3010.108585][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3010.116777][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3010.125324][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3010.135979][T10718] device veth0_macvtap entered promiscuous mode [ 3010.147676][T10718] device veth1_macvtap entered promiscuous mode [ 3010.163359][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3010.173936][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.184673][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3010.196512][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.211982][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3010.223701][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.234001][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3010.244777][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.254987][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3010.266010][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.277805][T10718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3010.288606][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3010.300231][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3010.312731][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3010.325196][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.335070][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3010.345560][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.355491][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3010.366022][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.376103][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3010.386808][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.397656][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3010.408301][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3010.422632][T10718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3010.432307][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3010.441287][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3010.507991][ T6669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3010.530610][ T6669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3010.544088][T30678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3010.556009][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3010.557089][T30678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3010.573588][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3010.612153][T10724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.626052][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.637114][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.648616][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.660167][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.671364][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.682272][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.693696][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.706969][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.718337][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.728847][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.739502][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.750619][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.761085][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.773513][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.784712][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.795307][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.807481][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.818095][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.829101][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.839972][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.851196][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.862588][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.873955][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.886806][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.897709][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.910034][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.921385][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.932195][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.944985][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.955874][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.966622][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.977947][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3010.988585][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:28 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f0000000000)) (async) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000004080)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @device_b, @from_mac=@broadcast, {0x3, 0x9}}, @ver_80211n={0x0, 0x5, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1}}, @void, @val={0x1, 0x6, [{0x12}, {0x4, 0x1}, {0x18}, {0x24, 0x1}, {0x60, 0x1}, {0x48}]}, @void, @val={0x2d, 0x1a, {0x0, 0x1, 0x1, 0x0, {0x7, 0xa4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x6, 0x1000, 0x1f}}, @void, [{0xdd, 0xcd, "d7a8ad058be1a1500cad2a15f36370fba2b728dffabd033668cb9b18b076ff0d14d8f0420e8678b611ee60b534897b38f4ae3fabf3328f32dd8e25fa3d4427b78414fbd25f4942c6c99f7be4425afdec694b0351ad5eae7be19de30633410e6b2443a14b2424b7271b4975f95ec0f0c78d5b5f2cf873e1a6b18175c06d38daacf5feb1f9969edba0db84cbd7fa339f90a72a02dd3f7f11c9bef323755e85b67046750dcf0ecfb968ea61593e533f1e042d926e7c83830045a10c4659c8658f5f0b084ef213755a4300e541f269"}, {0xdd, 0xaf, "65753d059438dbf8346128338276cb7a62e87cf13e7d384072f40d6e04e082bb7014f820584a3aaed1e871e3bbfdbce4a981f1429401579d63ef431ad07956329d151a034ce2c04180c097e27afc98f0a4d44630f5244f8a1888b64dc9fb556509228510a826256fb435c90fae60b3b6aecfbc07d2a72c3f73e05cca6faa8cadd1f4cf5f69faadbcb1eb5eadd447d680d85a37fe624c3a66e2fde4bbea4587881023c347505e361a42baa00af10cd5"}, {0xdd, 0xfa, "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"}, {0xdd, 0x35, "9b600066d1cec9144809a26fd4936d44c9112e9377a852188f69967a2784333220f22b3b52057e86cb400af07a550433f695235b98"}, {0xdd, 0x5c, "2d6e9d92111708fd1d72a22a64211527a7df06385184d2030c7a1179acc781116876e68a9429bce65505416211b04495da9b9258bb4767cd3186a93b7cadc9cbe772d8922c6681dbecd80b880a18c83e2eaf6b930108a1035e0652d6"}, {0xdd, 0xc8, "e6cba3f23435a7c7e172d0671e8c7da86453f76ff4d5c16d2496f941103da874950ba5547510c0a099c83b07d1b07b438862a6d11ae4280835e482e1d092b6e1c803255644ae852882ca6b40866ff107f57e6d329c164915e78b796f81473d004bcc7a00be7b4ea835e74d7e312f560af09b2be9cbde8f87505cbee5110ef8f439c97dd2b21e354723f399ce36651fd4918b70c560e9d111e00315c18aa44cb33a38b79eb8c4c22b850b50cc21bee51aa0e92b53597d569e910e4136e97bc2582f69617f11295e59"}]}, 0x41b) (async) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000003800)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5}, @initial, @device_a, @device_a, {0x8, 0x3}}, {0x4, 0x1, 0x1, 0x0, 0xfe}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4}, @initial, @broadcast, @from_mac=@device_b, {0x7, 0x6}}, {0x2, 0x0, 0x3, 0x1, 0x7}}}, @random="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"}, 0x841) r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f00000036c0)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/84, 0x54}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000340)=""/246, 0xf6}], 0x3}, 0x5}, {{&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f00000002c0)=""/4, 0x4}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000000780)=""/248, 0xf8}, {&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000940)=""/180, 0xb4}], 0x8, &(0x7f0000000a80)=""/60, 0x3c}}, {{&(0x7f0000000ac0)=@x25, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000b40)=""/102, 0x66}, {&(0x7f0000000bc0)=""/225, 0xe1}, {&(0x7f0000000cc0)=""/103, 0x67}, {&(0x7f0000000d40)=""/42, 0x2a}, {&(0x7f0000000d80)=""/88, 0x58}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/207, 0xcf}], 0x7, &(0x7f0000001f80)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002f80)=@un=@abs, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003000)=""/57, 0x39}, {&(0x7f0000003040)=""/125, 0x7d}, {&(0x7f00000030c0)=""/226, 0xe2}, {&(0x7f00000031c0)=""/222, 0xde}, {&(0x7f00000032c0)=""/192, 0xc0}, {&(0x7f0000003380)=""/37, 0x25}, {&(0x7f00000033c0)=""/100, 0x64}, {&(0x7f0000003440)=""/186, 0xba}, {&(0x7f0000003500)=""/166, 0xa6}], 0x9, &(0x7f0000003680)=""/44, 0x2c}}], 0x4, 0x40002000, &(0x7f00000037c0)) 08:53:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xaece, 0x0) 08:53:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4020940d, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x80086301, 0x0) 08:53:28 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x11, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x23}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3011.254827][ T9185] Bluetooth: hci1: command 0x0409 tx timeout [ 3011.337939][T10738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3011.358773][T10740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3011.370699][T10737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3011.378934][T10742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3011.409381][T10733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4020ae46, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x80086601, 0x0) 08:53:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4020ae76, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x801c581f, 0x0) 08:53:28 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x12, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x24}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:28 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x3ff, 0xfffff800}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x6c) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000005c0)={0x2}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) lremovexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@random={'user.', '\x00'}) recvmsg(r3, &(0x7f0000000580)={&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/67, 0x43}], 0x5, &(0x7f0000000480)=""/230, 0xe6}, 0x0) [ 3011.784495][T10762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3011.793388][T10760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3011.843176][T10761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3011.863164][T10765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x400448c9, 0x0) 08:53:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4020aea5, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 08:53:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4040ae79, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 08:53:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x25}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x80086301, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:28 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x3ff, 0xfffff800}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x6c) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000005c0)={0x2}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) lremovexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@random={'user.', '\x00'}) recvmsg(r3, &(0x7f0000000580)={&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/67, 0x43}], 0x5, &(0x7f0000000480)=""/230, 0xe6}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x3ff, 0xfffff800}) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x6c) (async) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000005c0)={0x2}) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) (async) lremovexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@random={'user.', '\x00'}) (async) recvmsg(r3, &(0x7f0000000580)={&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/67, 0x43}], 0x5, &(0x7f0000000480)=""/230, 0xe6}, 0x0) (async) 08:53:29 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x14, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) [ 3012.281576][T10788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3012.290009][T10783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3012.303135][T10787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3012.347679][T10782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3012.351116][T10796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:29 executing program 5: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x3ff, 0xfffff800}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x6c) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000005c0)={0x2}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) lremovexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@random={'user.', '\x00'}) recvmsg(r3, &(0x7f0000000580)={&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/67, 0x43}], 0x5, &(0x7f0000000480)=""/230, 0xe6}, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0x3ff, 0xfffff800}) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x6c) (async) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f00000005c0)={0x2}) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x5}, 0x14}}, 0x0) (async) lremovexattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=@random={'user.', '\x00'}) (async) recvmsg(r3, &(0x7f0000000580)={&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/187, 0xbb}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f00000002c0)=""/56, 0x38}, {&(0x7f0000000340)=""/58, 0x3a}, {&(0x7f0000000380)=""/67, 0x43}], 0x5, &(0x7f0000000480)=""/230, 0xe6}, 0x0) (async) 08:53:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x80086601, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3012.461235][T10802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x400448dd, 0x0) 08:53:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 08:53:29 executing program 5: pselect6(0x40, &(0x7f0000000040)={0x5, 0x20, 0x5, 0xffff, 0x8e, 0x2d, 0x2, 0x1}, &(0x7f0000000080)={0x8, 0x7fffffff, 0x101, 0x6, 0x9, 0xffff, 0xfff, 0x2f2e}, &(0x7f00000000c0)={0x1, 0x3, 0x7, 0x3ca, 0x2, 0x58, 0xe2e, 0x7f1}, &(0x7f00000001c0), &(0x7f0000000180)={&(0x7f0000000100)={[0x240000]}, 0x8}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) 08:53:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x801c581f, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:29 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x15, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3012.644118][T10816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:29 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x26}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3012.699189][T10827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0xc0045878, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 3012.795929][T10831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3012.816041][T10829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0xc0045878, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:29 executing program 5: pselect6(0x40, &(0x7f0000000040)={0x5, 0x20, 0x5, 0xffff, 0x8e, 0x2d, 0x2, 0x1}, &(0x7f0000000080)={0x8, 0x7fffffff, 0x101, 0x6, 0x9, 0xffff, 0xfff, 0x2f2e}, &(0x7f00000000c0)={0x1, 0x3, 0x7, 0x3ca, 0x2, 0x58, 0xe2e, 0x7f1}, &(0x7f00000001c0), &(0x7f0000000180)={&(0x7f0000000100)={[0x240000]}, 0x8}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x5, 0x20, 0x5, 0xffff, 0x8e, 0x2d, 0x2, 0x1}, &(0x7f0000000080)={0x8, 0x7fffffff, 0x101, 0x6, 0x9, 0xffff, 0xfff, 0x2f2e}, &(0x7f00000000c0)={0x1, 0x3, 0x7, 0x3ca, 0x2, 0x58, 0xe2e, 0x7f1}, &(0x7f00000001c0), &(0x7f0000000180)={&(0x7f0000000100)={[0x240000]}, 0x8}) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) 08:53:29 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x16, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) [ 3013.061683][T10842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3013.101676][T10847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3013.117771][T10849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x400454ca, 0x0) 08:53:30 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x27}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0xc008ae67, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) [ 3013.275198][T10851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3013.304734][T10850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3013.344098][ T9263] Bluetooth: hci1: command 0x041b tx timeout 08:53:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0xc00caee0, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:30 executing program 5: pselect6(0x40, &(0x7f0000000040)={0x5, 0x20, 0x5, 0xffff, 0x8e, 0x2d, 0x2, 0x1}, &(0x7f0000000080)={0x8, 0x7fffffff, 0x101, 0x6, 0x9, 0xffff, 0xfff, 0x2f2e}, &(0x7f00000000c0)={0x1, 0x3, 0x7, 0x3ca, 0x2, 0x58, 0xe2e, 0x7f1}, &(0x7f00000001c0), &(0x7f0000000180)={&(0x7f0000000100)={[0x240000]}, 0x8}) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x5, 0x20, 0x5, 0xffff, 0x8e, 0x2d, 0x2, 0x1}, &(0x7f0000000080)={0x8, 0x7fffffff, 0x101, 0x6, 0x9, 0xffff, 0xfff, 0x2f2e}, &(0x7f00000000c0)={0x1, 0x3, 0x7, 0x3ca, 0x2, 0x58, 0xe2e, 0x7f1}, &(0x7f00000001c0), &(0x7f0000000180)={&(0x7f0000000100)={[0x240000]}, 0x8}) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, 0x0, 0x0) (async) 08:53:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 08:53:30 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x17, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3013.525873][T10867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3013.551885][T10872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0xc0189436, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3013.567602][T10869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:30 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x28}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2) 08:53:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0xc018aec0, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3013.722693][T10879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3013.736082][T10877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 08:53:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3) 08:53:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0xc020660b, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:30 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x18, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3013.985077][T10891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4) 08:53:30 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x29}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xa8, 0x0, 0x10000}) [ 3014.132433][T10899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3014.172907][T10896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x5) 08:53:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xb6, 0x0, 0x10000}) 08:53:31 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x19, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3014.399105][T10908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6) 08:53:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 08:53:31 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x60}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x7) 08:53:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x2, 0x10000}) 08:53:31 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1a, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:31 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, r2, r3, r5, 0x0], &(0x7f00000000c0)=[0x7ff, 0x1], 0x7, 0x1}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) [ 3014.741083][T10922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3014.811331][T10918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3014.833043][T10933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3014.853934][T10934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x8) 08:53:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x3, 0x10000}) 08:53:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x9) 08:53:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x4, 0x10000}) 08:53:31 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:31 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1b, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 08:53:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa) [ 3015.225350][T10949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3015.246515][T10948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3015.246580][T10951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x5, 0x10000}) 08:53:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xb) 08:53:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x6, 0x10000}) [ 3015.423368][ T9263] Bluetooth: hci1: command 0x040f tx timeout 08:53:32 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)={r5}) (async) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, r2, r3, r5, 0x0], &(0x7f00000000c0)=[0x7ff, 0x1], 0x7, 0x1}) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) 08:53:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x40086602, 0x0) 08:53:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xc) 08:53:32 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:32 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1c, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x7, 0x10000}) [ 3015.671249][T10976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3015.711502][T10982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3015.713262][T10981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3015.756743][T10985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x300, 0x10000}) 08:53:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xd) 08:53:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x40186366, 0x0) 08:53:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x500, 0x10000}) 08:53:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xe) 08:53:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x600, 0x10000}) 08:53:32 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000001c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)={r5}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, r2, r3, r5, 0x0], &(0x7f00000000c0)=[0x7ff, 0x1], 0x7, 0x1}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) 08:53:32 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x2}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:32 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1d, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf) [ 3016.174471][T11006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3016.203100][T11008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x401c5820, 0x0) [ 3016.225556][T11010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3016.253823][T11005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x700, 0x10000}) 08:53:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x10) 08:53:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0xff00, 0x10000}) 08:53:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 08:53:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x29) 08:53:33 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1e, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x80ffff, 0x10000}) 08:53:33 executing program 5: creat(&(0x7f0000000100)='./file0\x00', 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat2(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x1, 0x1, 0x1a, 0x1, "cec4d2cfa0ac0f45a1b177fc768a2375679a4eb607bf84df5e866b2a124226ae90c24d8dbb153156d7cef8e6cfa301dbc7c4f35381c78760f3ddb586ed4f8a1d", "33a45a7ffde21b2752ccfc97b944de7bd51466ec0166f6605c0184bd96e546a4", [0x1f, 0x8]}) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) 08:53:33 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x3}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3016.623490][T11036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3016.666915][T11041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3016.696297][T11040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3016.710537][T11043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x34) 08:53:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x1000000, 0x10000}) 08:53:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 08:53:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x2000000, 0x10000}) 08:53:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4a) 08:53:33 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x21, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:33 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x4}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:33 executing program 5: creat(&(0x7f0000000100)='./file0\x00', 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat2(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x1, 0x1, 0x1a, 0x1, "cec4d2cfa0ac0f45a1b177fc768a2375679a4eb607bf84df5e866b2a124226ae90c24d8dbb153156d7cef8e6cfa301dbc7c4f35381c78760f3ddb586ed4f8a1d", "33a45a7ffde21b2752ccfc97b944de7bd51466ec0166f6605c0184bd96e546a4", [0x1f, 0x8]}) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x48) (async) pipe(&(0x7f0000000140)) (async) openat2(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x1, 0x1, 0x1a, 0x1, "cec4d2cfa0ac0f45a1b177fc768a2375679a4eb607bf84df5e866b2a124226ae90c24d8dbb153156d7cef8e6cfa301dbc7c4f35381c78760f3ddb586ed4f8a1d", "33a45a7ffde21b2752ccfc97b944de7bd51466ec0166f6605c0184bd96e546a4", [0x1f, 0x8]}) (async) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) (async) [ 3017.046982][T11061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x3000000, 0x10000}) 08:53:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x300) [ 3017.132592][T11064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3017.147112][T11065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3017.164429][T11070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3017.215108][T11063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x4000000, 0x10000}) 08:53:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x500) 08:53:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 08:53:34 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x22, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x5000000, 0x10000}) 08:53:34 executing program 5: creat(&(0x7f0000000100)='./file0\x00', 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) openat2(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x1, 0x1, 0x1a, 0x1, "cec4d2cfa0ac0f45a1b177fc768a2375679a4eb607bf84df5e866b2a124226ae90c24d8dbb153156d7cef8e6cfa301dbc7c4f35381c78760f3ddb586ed4f8a1d", "33a45a7ffde21b2752ccfc97b944de7bd51466ec0166f6605c0184bd96e546a4", [0x1f, 0x8]}) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x48) (async) pipe(&(0x7f0000000140)) (async) openat2(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x1, 0x1, 0x1a, 0x1, "cec4d2cfa0ac0f45a1b177fc768a2375679a4eb607bf84df5e866b2a124226ae90c24d8dbb153156d7cef8e6cfa301dbc7c4f35381c78760f3ddb586ed4f8a1d", "33a45a7ffde21b2752ccfc97b944de7bd51466ec0166f6605c0184bd96e546a4", [0x1f, 0x8]}) (async) syz_80211_inject_frame(&(0x7f0000000300)=@broadcast, 0x0, 0x0) (async) [ 3017.476896][T11087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3017.503026][ T1132] Bluetooth: hci1: command 0x0419 tx timeout 08:53:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x5a0) 08:53:34 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x5}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x6000000, 0x10000}) [ 3017.591579][T11092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3017.622346][T11098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3017.641640][T11097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x600) 08:53:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x7000000, 0x10000}) 08:53:34 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x23, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x700) 08:53:34 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x6}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3017.946861][T11109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3018.074122][T11114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3018.097629][T11113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 08:53:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0xff000000, 0x10000}) 08:53:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x880) [ 3018.943532][ T4570] device hsr_slave_0 left promiscuous mode [ 3018.949981][ T4570] device hsr_slave_1 left promiscuous mode [ 3018.956663][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3018.964415][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3018.973254][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3018.980663][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3018.989262][ T4570] device bridge_slave_1 left promiscuous mode [ 3018.996030][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 3019.005457][ T4570] device bridge_slave_0 left promiscuous mode [ 3019.011620][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 3019.024771][ T4570] device veth1_macvtap left promiscuous mode [ 3019.030800][ T4570] device veth0_macvtap left promiscuous mode [ 3019.037067][ T4570] device veth1_vlan left promiscuous mode [ 3019.043089][ T4570] device veth0_vlan left promiscuous mode [ 3019.218670][ T4570] team0 (unregistering): Port device team_slave_1 removed [ 3019.232537][ T4570] team0 (unregistering): Port device team_slave_0 removed [ 3019.248284][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3019.271316][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3019.348176][ T4570] bond0 (unregistering): Released all slaves [ 3020.135469][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.141776][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.874547][ T1213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3020.883789][ T1213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3020.891484][ T1213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3020.899596][ T1213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3020.907369][ T1213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3020.914856][ T1213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3021.000730][T11128] chnl_net:caif_netlink_parms(): no params data found [ 3021.044905][T11128] bridge0: port 1(bridge_slave_0) entered blocking state [ 3021.052041][T11128] bridge0: port 1(bridge_slave_0) entered disabled state [ 3021.059957][T11128] device bridge_slave_0 entered promiscuous mode [ 3021.067871][T11128] bridge0: port 2(bridge_slave_1) entered blocking state [ 3021.075099][T11128] bridge0: port 2(bridge_slave_1) entered disabled state [ 3021.085429][T11128] device bridge_slave_1 entered promiscuous mode [ 3021.110443][T11128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3021.122042][T11128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3021.148841][T11128] team0: Port device team_slave_0 added [ 3021.156553][T11128] team0: Port device team_slave_1 added [ 3021.177106][T11128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3021.184143][T11128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3021.210299][T11128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3021.227187][T11128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3021.234358][T11128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3021.262135][T11128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3021.290518][T11128] device hsr_slave_0 entered promiscuous mode [ 3021.297551][T11128] device hsr_slave_1 entered promiscuous mode [ 3021.304153][T11128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3021.311696][T11128] Cannot create hsr debugfs directory [ 3021.385049][T11128] bridge0: port 2(bridge_slave_1) entered blocking state [ 3021.392164][T11128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3021.399482][T11128] bridge0: port 1(bridge_slave_0) entered blocking state [ 3021.406551][T11128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3021.462384][T11128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3021.476488][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3021.484683][ T9263] bridge0: port 1(bridge_slave_0) entered disabled state [ 3021.492209][ T9263] bridge0: port 2(bridge_slave_1) entered disabled state [ 3021.500766][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3021.517320][T11128] 8021q: adding VLAN 0 to HW filter on device team0 [ 3021.529310][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3021.538093][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 3021.545206][ T9186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3021.563633][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3021.571951][ T9263] bridge0: port 2(bridge_slave_1) entered blocking state [ 3021.579023][ T9263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3021.601870][T11128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3021.612495][T11128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3021.626925][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3021.635888][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3021.644426][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3021.652651][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3021.662293][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3021.670111][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3021.693887][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3021.701262][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3021.714595][T11128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3021.732143][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3021.754357][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3021.763464][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3021.771045][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3021.781840][T11128] device veth0_vlan entered promiscuous mode [ 3021.796081][T11128] device veth1_vlan entered promiscuous mode [ 3021.815667][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3021.824495][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3021.832519][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3021.844004][T11128] device veth0_macvtap entered promiscuous mode [ 3021.855062][T11128] device veth1_macvtap entered promiscuous mode [ 3021.870868][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3021.881939][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.891816][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3021.906471][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.916402][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3021.926844][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.937386][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3021.947945][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.957787][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3021.969192][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3021.981588][T11128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3021.993999][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3022.007351][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3022.017979][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3022.030943][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.040953][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3022.051930][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.062002][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3022.073020][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.082899][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3022.093369][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.103318][T11128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3022.113758][T11128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3022.126808][T11128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3022.137294][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3022.146010][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3022.217864][T18320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3022.226821][T18320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3022.242004][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3022.271987][T18320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3022.280843][T18320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3022.291823][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3022.362602][T11134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3022.380882][T11138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:39 executing program 5: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) 08:53:39 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x24, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:39 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x7}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0xffff8000, 0x10000}) 08:53:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x900) 08:53:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) [ 3022.741080][T11145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3022.751688][T11147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3022.756519][T11153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3022.765924][T11141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa00) 08:53:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10002}) [ 3022.933517][ T9186] Bluetooth: hci1: command 0x0409 tx timeout 08:53:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10003}) 08:53:39 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x25, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa3d) 08:53:39 executing program 5: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) (async) 08:53:39 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x8}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3023.137479][T11167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3023.209909][T11173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3023.221871][T11174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10004}) [ 3023.251716][T11171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3023.257885][T11175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 08:53:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xb00) 08:53:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10005}) 08:53:40 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x26, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xc00) 08:53:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10006}) [ 3023.516995][T11190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x9}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:40 executing program 5: syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) (async) 08:53:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xd00) [ 3023.653866][T11198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3023.678754][T11200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10007}) [ 3023.707605][T11200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3023.717850][T11201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:40 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x27, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xe00) [ 3023.892488][T11210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x80086301, 0x0) 08:53:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10300}) 08:53:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 08:53:40 executing program 5: ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000340)={0x6, "0f158b6f7ab1794b505c459d0b4e9b0e298ea16cfed1c26040911597cd1a42ef", 0x0, 0x80000000, 0x5, 0x20, 0x60a07, 0x8}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x673) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x7d89}, @device_b, @broadcast, @multi={{0x1, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x7, {0x5, 0xfff}, "02b54de85f62229f"}, {0x0, 0x0, {0xe, 0x51}, "f583f0fc1298412e"}, {0x0, 0xb, {0xb, 0x80}, "cf716d43d7a96297"}, {0x0, 0x7, {0x2, 0x3}, "4d5365381bc67710"}, {0x0, 0x4, {0x1, 0x3}, "0251eb0226534b2f"}, {0x0, 0x9, {0x5, 0x8}, "7bc64a18e6c5821f"}, {0x0, 0x3, {0x2}, "509f4e501345610a"}], {0x0, 0x5, {0x4, 0xfc}, "aa5e61f439dd68b5"}}}, 0x72) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000200)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_a, @random="3f4a85f8fe8a", {0x5, 0x1}}, @ver_80211n={0x0, 0xf89, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @val={0x0, 0x1d, @random="722b92c209178ca247e80327651de6549cb78b7708b128efa71a2fcf55"}, @void, @val={0x3, 0x1, 0x6c}, @val={0x2d, 0x1a, {0x8, 0x3, 0x3, 0x0, {0x1, 0x9, 0x0, 0x20, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x1, 0x3f}}, @void, [{0xdd, 0x48, "2b07ccb387f846bb44cc05b9c18f9bc6cb4ad51f4f57e045152478ed6fa48f5b340aad713d1b92bde1c46ae24643ec14960b267713135fddec9e4b6d5c12aa68f92897aaa40072db"}, {0xdd, 0x32, "37d91980c54748e87cf4288265a40aeccf7cfab29512dcce36739929ee538b23191a1741b31ab2d47624b4df8ca679ff4a55"}]}, 0xd8) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x40}, @device_a, @broadcast, @random="e1685b964695", {0x7, 0x5}}, @void, @void, @void, @void, @void}, 0x18) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x31f) 08:53:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0xe}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3024.102332][T11218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.135495][T11218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.153100][T11226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.174359][T11218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.186885][T11223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10500}) 08:53:41 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x28, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1040) [ 3024.211322][T11218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.261033][T11218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.281250][T11231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.301311][T11218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10600}) 08:53:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1f00) 08:53:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0xf}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10700}) [ 3024.594102][T11245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.617979][T11244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x80086601, 0x0) 08:53:41 executing program 5: ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000340)={0x6, "0f158b6f7ab1794b505c459d0b4e9b0e298ea16cfed1c26040911597cd1a42ef", 0x0, 0x80000000, 0x5, 0x20, 0x60a07, 0x8}) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000d00)=ANY=[@ANYBLOB="78b70700ffffffffffff080211000001080211000000120008021100000147f87368a82c13e0c56aa41be82df82e3857ccf1df2a3e8931af9b5cd2a494f1222bf75eaa3edba810904180af862f219393efb377d11a25c26e5eb1350c989164a97af9c305d9f85032b713d241b573bf8f5926eeae21d97aaac4307b082d9eace6ff5c53b541e6777c8e9f8fb605305bbc37516bb71e4ab25f4fa891af468fa3d1b5fd50389d8b42f0ad57c8bb9da51b26afe8a2186cfa02262f1529179b4238b3673da69032a10be9920c681e4953563762f3ce61acfc50082e9ee40fdc17d901addf0aa52a51c90ad211a87b159352ea3996955423b7cced04fa3c4346c33039ffc5396559fbb0a97c09013b4e7ef0fed14ff08f011502be6d1f5971dc46a2f7e8f61baa9a5dfae676c0e250d7b7dbc772c2fb8df9a0952241e5360bea022a5d2c9db73c7202e6e83daaff522677e2b19f3d3f8392184fcbda1770946ba6343716deca0adf7f6cfdeb4c12543482860066a36cba00ebb38961e9cdb28ca36d3f1d09b209d7bfad72a6cce1b4c42f2356eef5bd1d3f178b2c9053d023d19f22bfddce91bed513bcc288b65261784bdef3b3bc98c87b50ae8a40a6af05ebcd569f36e4da348d2109cbae34bbea46eb107c406fa47613e9526e25ff401161d470e7f384c368a30500be25734ae04a8bfa1cfe861ed11337147e61eada28cedc502f31e9b7f1fe045a82c0c7ff2e4c782bd0665bc2f8316098be8ba38c45437d354861f2bb4cda421443980b8eb1ea32de69ef0c07e6bc0c77ecea307c369dcce61a025ff94534a68cbb197e937158e79b80c3ac940dd818e50d51746c83ed4a7e2b4d8d2792d3f15d365e859b5a7c7afa690ecf7f9ac55658a5c48cfb9e07b8b6bf91b6e2f770cca50edb7b539f94d1c43f5f020acb677f373ecdc646acc02343849ba2ba47814b2d42f3e2ac4d2631314b247e24d643e674ac9abd05214ad0001ddc22fdce14de46939415f74eb2d1ccb2f2ec0fc0ab09b0a85a6439eb46022261e7f78dee287238fa00d446d0b4328a6e372b224eaa94b25887e010effb703ae2be16f219d339662aa878861d6082448ed5c11b58fde79766ebde11528584da1f9ec707bf483a8f36a39a80a31f442a1553071d0d15e51426ec14212103d46b74fe442fbeb3a91072292e773f67d7ccac5468b8f5f6dd2395bc55cc116256b8ea7153ada91096850467c351b326e5327447f728858cb9671e19ae5d533544edbd649cc8202fe7973ddbcf76fec865e55376cd28e5dd590a500e2ea2ca814670027ee295221a33594fae6132ede1f739214fa6823ab47f37795448172ed42697d4b7de7e108acdc2d3af0a8d660b18828cc14a611ad8c6e71d5342889e1a938691e1164215b66927f0bfe691c93f1626f40109b76abdb9300e0dbc97cf87069302b9151fd50b435c2ea8356b5196f35eaebeb4b0269b365373f5577e71eab6227a73b0f5a87a06b3459ba6c9573e95001b8e423e1ba89aa9b436e3ace277902b1e99166fc01216a4399936f56bacfdf069fb1d1542f5c728715c0456451cb706fd960b59b7f95060e35dbc84198a8d261e46344cdf0aa85510a8f30994305b2d9467024303c8a0fc002aa760478513aeddc96b83852ca7d3816e570614cbaf80e7b36f135d8c691523cea19ffab21cc634ae13f06d3a0041abc41be520375f2386af7738552b11b595fff0a393a9ce8fa6a437794366e272875faaa9951fc1d71343a341d2e77ed5c299a6e21c6fdfd2e594ece1aa94eea8f4b6069351ec829ac297bb5139b6eafc24f1b90abd00b852b880deec63bc7feff6ebad56b52197103bd1bb82c504e1cae889eda53042b76915669a71a1b22aae0ea9d4920f5a60f6e8131c30668de195a9897db4601401fe6349bb641954c46e2b1aaa25f1dce7e0af80ee36e97c5cf2d0eae321b6c86046dcbeb164569e91b74cc26f0e0a9e65acc4e64ef3951999dff8ab299629d95b71819b840f59e8dcc6e8154bc8631bf088ac21f829362f3c19fdafe5976deb975cd44f6c64093ab0ffd2799bb301506b0738885cbc0004c005a86f15cf0c056ad46a7ed8fcc40e9330ce445c43d9d8978bf3436d57a82afd204e57d6a971fa05154de16b891e2cf1cee3f03b716362e0e151c8290ffbddee3d5756e9f3744926a4ea6819f505b8ee64516c08e8dee3988d0a97feee76307f539e01781462cea323d18533d65b8cebff1d2a128bc0c3c8484b2ba9b0270a064c2d33dc4ed91a6ef43a9dd2258154f7f1ca87ee20bef0a266204c3b67a803b8796967027cd4864874bbd36235d08da0daf487517d03c291e97a1d8ffe6ce8399a0617d56bbfa8d22a79198b7b6ab1f27ea76678613449fbff359ca8529fc1332eb090317d26706c4875a110b13ba6d29dc42a532001602d37b1d884ef9f3f6e7d8e1bd7af57d91c01a62d91f3eb041d483b37e93a0a919813409e210000000000"], 0x673) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x7d89}, @device_b, @broadcast, @multi={{0x1, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x7, {0x5, 0xfff}, "02b54de85f62229f"}, {0x0, 0x0, {0xe, 0x51}, "f583f0fc1298412e"}, {0x0, 0xb, {0xb, 0x80}, "cf716d43d7a96297"}, {0x0, 0x7, {0x2, 0x3}, "4d5365381bc67710"}, {0x0, 0x4, {0x1, 0x3}, "0251eb0226534b2f"}, {0x0, 0x9, {0x5, 0x8}, "7bc64a18e6c5821f"}, {0x0, 0x3, {0x2}, "509f4e501345610a"}], {0x0, 0x5, {0x4, 0xfc}, "aa5e61f439dd68b5"}}}, 0x72) (async) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000200)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_a, @random="3f4a85f8fe8a", {0x5, 0x1}}, @ver_80211n={0x0, 0xf89, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @val={0x0, 0x1d, @random="722b92c209178ca247e80327651de6549cb78b7708b128efa71a2fcf55"}, @void, @val={0x3, 0x1, 0x6c}, @val={0x2d, 0x1a, {0x8, 0x3, 0x3, 0x0, {0x1, 0x9, 0x0, 0x20, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x1, 0x3f}}, @void, [{0xdd, 0x48, "2b07ccb387f846bb44cc05b9c18f9bc6cb4ad51f4f57e045152478ed6fa48f5b340aad713d1b92bde1c46ae24643ec14960b267713135fddec9e4b6d5c12aa68f92897aaa40072db"}, {0xdd, 0x32, "37d91980c54748e87cf4288265a40aeccf7cfab29512dcce36739929ee538b23191a1741b31ab2d47624b4df8ca679ff4a55"}]}, 0xd8) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x40}, @device_a, @broadcast, @random="e1685b964695", {0x7, 0x5}}, @void, @void, @void, @void, @void}, 0x18) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x31f) 08:53:41 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x29, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2000) 08:53:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x1ff00}) [ 3024.742907][T11251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.756090][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.769701][T11254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.777321][T11251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.816716][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.837170][T11251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.851334][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x100000}) [ 3024.866917][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.885405][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.905190][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2900) 08:53:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x11}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3024.924982][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.936435][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3024.962590][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.011149][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.014842][ T1132] Bluetooth: hci1: command 0x041b tx timeout 08:53:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x4000000}) [ 3025.057468][T11271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.057878][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.069606][T11269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:41 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x48, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3025.154195][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.166023][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.180627][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0xff000000}) 08:53:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3400) [ 3025.208913][T11278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.232031][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.282988][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.302456][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.315690][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.347895][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.364123][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.377084][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.388392][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.414248][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.425709][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.453363][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.458490][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.487980][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.496057][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.516385][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.530838][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.536332][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.567154][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.568810][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.599556][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x801c581f, 0x0) [ 3025.610021][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.612294][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.631003][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.635130][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.645328][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.661708][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.666847][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.673689][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.689980][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.692496][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.709582][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.719940][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.732232][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.738570][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.761606][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.764732][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.790708][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.791456][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.801445][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.833006][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.843817][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.856223][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:42 executing program 5: ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000340)={0x6, "0f158b6f7ab1794b505c459d0b4e9b0e298ea16cfed1c26040911597cd1a42ef", 0x0, 0x80000000, 0x5, 0x20, 0x60a07, 0x8}) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x673) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000140)=@ctrl_frame=@ba={{}, {0x7d89}, @device_b, @broadcast, @multi={{0x1, 0x1, 0x1, 0x0, 0x7}, [{0x0, 0x7, {0x5, 0xfff}, "02b54de85f62229f"}, {0x0, 0x0, {0xe, 0x51}, "f583f0fc1298412e"}, {0x0, 0xb, {0xb, 0x80}, "cf716d43d7a96297"}, {0x0, 0x7, {0x2, 0x3}, "4d5365381bc67710"}, {0x0, 0x4, {0x1, 0x3}, "0251eb0226534b2f"}, {0x0, 0x9, {0x5, 0x8}, "7bc64a18e6c5821f"}, {0x0, 0x3, {0x2}, "509f4e501345610a"}], {0x0, 0x5, {0x4, 0xfc}, "aa5e61f439dd68b5"}}}, 0x72) syz_80211_inject_frame(&(0x7f00000001c0)=@broadcast, &(0x7f0000000200)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_a, @random="3f4a85f8fe8a", {0x5, 0x1}}, @ver_80211n={0x0, 0xf89, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @val={0x0, 0x1d, @random="722b92c209178ca247e80327651de6549cb78b7708b128efa71a2fcf55"}, @void, @val={0x3, 0x1, 0x6c}, @val={0x2d, 0x1a, {0x8, 0x3, 0x3, 0x0, {0x1, 0x9, 0x0, 0x20, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x1, 0x1, 0x3f}}, @void, [{0xdd, 0x48, "2b07ccb387f846bb44cc05b9c18f9bc6cb4ad51f4f57e045152478ed6fa48f5b340aad713d1b92bde1c46ae24643ec14960b267713135fddec9e4b6d5c12aa68f92897aaa40072db"}, {0xdd, 0x32, "37d91980c54748e87cf4288265a40aeccf7cfab29512dcce36739929ee538b23191a1741b31ab2d47624b4df8ca679ff4a55"}]}, 0xd8) (async) syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x40}, @device_a, @broadcast, @random="e1685b964695", {0x7, 0x5}}, @void, @void, @void, @void, @void}, 0x18) syz_80211_inject_frame(&(0x7f0000000040), &(0x7f00000003c0)=ANY=[@ANYBLOB="881d8100080211000000080211000001080211000001a9f461408801ff00080211000001080211000000ff6733ff3b6d0800f306c9158741149c859035248029159064b89749fc1e9901723c092bd46cad5461a06f20176d836341109c91ad733f314110425559a206b249aa0d3423a5b76775c605bdda61ae98c40c2efba095aedc370c534415b2cdd174878c8a54c043ebb343033dd81ce3e15c70dd4df3ba60849665cc4df04ca7ddc5b73b1d53f476675ae6f718b3eab75ad4ce9897c3d6ff4054fd540c090b608027859b21ad967a9357388bf77dc56cd89390b82010b769c3c6fc2599e6dfb8300a44fb945d41bbdb720020b77bf027985923bcf3146cce53a444ffc2ef12e755cc9d0753a33b3c709c606a546089527bd833a1845bd9b49bc07d1cc4a12cf3a9a73e08bfb97533964e88fd22c069fc2f733dcbd50c7d4f3c3421fe04c587138d383892868f88619dec20b99b0a01c7081742480e96a8d72c2d5d657db4473cc8c084e974283967829f99b96d5379f05d88f21c083938f298d3ffe431aea8459fd4357091dc81e6760646083133530924ba68fcd5b1f9abab05a948bb2c3d6e50ea454ec1e681c4f78385dcfdcc43eaa956d91909c077c6fb9a31428304b307e26c608e5b5f0c21a2b14fd108a87dc6e9926c3c2be905255fe5237955bbc557c0a2028e795ede26acb66e68d2f8dfcb1fc91470e22c576c824ad9f619b60601e0cff3e01f0c86d141874cd85000ae2f29deee265a06fe235c14c565dae193eaa7f22376439505fc9a17af9f2fd3e4415b89d4e44ca6049f8c51b88d12b35eb469cb13f9fccd89a8fb796fe0fd359ff1f0c7a2702fe5577f599f59e4a28bed7621fe18d6ce7227e763f5dab06481c142b04295e445ee0822cb8947a3b26d644dd6fa9d8ec649921d096bd30896bb72673e832600af8e9c140073c345ca300a5af1bbf1124b2e9d90044fcc547c60c393d0425f4e0c4c74ca5f29b0a0af6087d6fc3525b30608c5db369fd3f53353630e3dae77de3cc1a0ee1ce5b34bcbef9b5b2ff10de958373d493b11b3f5eedd4750ac81e5ee42bc611cfec99950c542d62dbfd929980748f9a55ccef2b7bbd1f12354d4465a3b05039f852b3fa6ac1e9945f3ff"], 0x31f) 08:53:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:42 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3d0a) 08:53:42 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x4c, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3025.870489][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.873208][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.881314][T11253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.946134][T11296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.948826][T11298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3025.990764][T11302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3026.023232][T11295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3026.034005][T11303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3026.044885][T11301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4010) [ 3026.082648][T11301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3026.097685][T11302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4a00) 08:53:43 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x60, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:43 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x14}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3026.345150][T11319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 08:53:43 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x4}}, 0xa) [ 3026.416521][T11321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3026.430441][T11320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x7ffb) [ 3026.497442][T11330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3026.524810][T11330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:43 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080001007f0000000c009900050000000e00000008000100280000001c00238006001200060000000500050006000000060018000600000024002380080015002e00000006000300b800000005001f000000000008001c000800000008000100490000000c009900090000008000000008000300", @ANYRES32=r0, @ANYBLOB="2c00238005000f000400000005000f0000000000060001006c00000005001300000000000500110001000000"], 0xcc}, 0x1, 0x0, 0x0, 0x20008044}, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r3, 0x400000001ffffffd) r4 = socket$inet6(0xa, 0x6, 0x0) gettid() connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 08:53:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x8008) 08:53:43 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x68, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:43 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x15}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3026.725965][T11341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa005) 08:53:43 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x4}}, 0xa) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x4}}, 0xa) (async) [ 3026.872968][T11344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3026.959030][T11343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3026.981646][T11350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xfb7f) [ 3027.024804][T11350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3027.037188][T11350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:43 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x6c, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3027.093626][ T1132] Bluetooth: hci1: command 0x040f tx timeout [ 3027.142436][T11351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3027.183583][T11358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xff00) 08:53:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 08:53:44 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (rerun: 32) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080001007f0000000c009900050000000e00000008000100280000001c00238006001200060000000500050006000000060018000600000024002380080015002e00000006000300b800000005001f000000000008001c000800000008000100490000000c009900090000008000000008000300", @ANYRES32=r0, @ANYBLOB="2c00238005000f000400000005000f0000000000060001006c00000005001300000000000500110001000000"], 0xcc}, 0x1, 0x0, 0x0, 0x20008044}, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r3, 0x400000001ffffffd) (async) r4 = socket$inet6(0xa, 0x6, 0x0) gettid() (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async, rerun: 32) r5 = accept4(r3, 0x0, 0x0, 0x0) (rerun: 32) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 08:53:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xff01) 08:53:44 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x16}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:44 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x74, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3027.689804][T11374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3027.710319][T11373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3027.772226][T11369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x20002) 08:53:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xfee00) 08:53:44 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x7a, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3028.269111][T11391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3028.290014][T30678] device hsr_slave_0 left promiscuous mode [ 3028.347757][T30678] device hsr_slave_1 left promiscuous mode [ 3028.398704][T30678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3028.451446][T30678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3028.543932][T30678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3028.559551][T30678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3028.595625][T30678] device bridge_slave_1 left promiscuous mode [ 3028.609871][T30678] bridge0: port 2(bridge_slave_1) entered disabled state [ 3028.630236][T30678] device bridge_slave_0 left promiscuous mode [ 3028.637923][T30678] bridge0: port 1(bridge_slave_0) entered disabled state [ 3028.682126][T30678] device veth1_macvtap left promiscuous mode [ 3028.688429][T30678] device veth0_macvtap left promiscuous mode [ 3028.696660][T30678] device veth1_vlan left promiscuous mode [ 3028.702658][T30678] device veth0_vlan left promiscuous mode [ 3028.949969][T30678] team0 (unregistering): Port device team_slave_1 removed [ 3028.964710][T30678] team0 (unregistering): Port device team_slave_0 removed [ 3028.978730][T30678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3028.993849][T30678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3029.059374][T30678] bond0 (unregistering): Released all slaves [ 3030.955453][ T9299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3030.965615][ T9299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3030.973857][ T9299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3030.982530][ T9299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3030.991216][ T9299] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3030.998544][ T9299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3031.086058][T11397] chnl_net:caif_netlink_parms(): no params data found [ 3031.130020][T11397] bridge0: port 1(bridge_slave_0) entered blocking state [ 3031.137335][T11397] bridge0: port 1(bridge_slave_0) entered disabled state [ 3031.145891][T11397] device bridge_slave_0 entered promiscuous mode [ 3031.153901][T11397] bridge0: port 2(bridge_slave_1) entered blocking state [ 3031.160988][T11397] bridge0: port 2(bridge_slave_1) entered disabled state [ 3031.169476][T11397] device bridge_slave_1 entered promiscuous mode [ 3031.195755][T11397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3031.207848][T11397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3031.235803][T11397] team0: Port device team_slave_0 added [ 3031.243054][T11397] team0: Port device team_slave_1 added [ 3031.260863][T11397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3031.267879][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3031.294475][T11397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3031.307349][T11397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3031.314313][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3031.340299][T11397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3031.369005][T11397] device hsr_slave_0 entered promiscuous mode [ 3031.378483][T11397] device hsr_slave_1 entered promiscuous mode [ 3031.386736][T11397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3031.394387][T11397] Cannot create hsr debugfs directory [ 3031.460412][T11397] bridge0: port 2(bridge_slave_1) entered blocking state [ 3031.467542][T11397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3031.474934][T11397] bridge0: port 1(bridge_slave_0) entered blocking state [ 3031.482123][T11397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3031.531022][T11397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3031.545573][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3031.553892][T13117] bridge0: port 1(bridge_slave_0) entered disabled state [ 3031.561428][T13117] bridge0: port 2(bridge_slave_1) entered disabled state [ 3031.571629][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3031.585713][T11397] 8021q: adding VLAN 0 to HW filter on device team0 [ 3031.597732][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3031.606859][T30730] bridge0: port 1(bridge_slave_0) entered blocking state [ 3031.614014][T30730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3031.635452][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3031.644165][T30730] bridge0: port 2(bridge_slave_1) entered blocking state [ 3031.651225][T30730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3031.666608][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3031.675567][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3031.692452][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3031.706474][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3031.720222][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3031.731256][T11397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3031.751433][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3031.759064][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3031.772202][T11397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3031.790329][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3031.811300][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3031.821300][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3031.830107][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3031.839635][T11397] device veth0_vlan entered promiscuous mode [ 3031.855840][T11397] device veth1_vlan entered promiscuous mode [ 3031.877631][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3031.885961][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3031.894759][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3031.906540][T11397] device veth0_macvtap entered promiscuous mode [ 3031.916992][T11397] device veth1_macvtap entered promiscuous mode [ 3031.935321][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3031.950069][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3031.961509][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3031.972980][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3031.983750][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3031.994212][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3032.006696][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3032.021055][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3032.031810][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3032.042907][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3032.059616][T11397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3032.074272][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3032.089378][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3032.101643][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3032.112139][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3032.122108][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3032.132678][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3032.143737][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3032.154263][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3032.164135][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3032.174765][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3032.185840][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3032.196304][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3032.209313][T11397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3032.218051][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3032.226947][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3032.294338][T11381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3032.302447][T11381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3032.328940][T18319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3032.332900][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3032.339860][T18319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3032.357063][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3032.395564][T11406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3032.406603][T11406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3032.418993][T11406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:49 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x4}}, 0xa) 08:53:49 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x17}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x100000) 08:53:49 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080001007f0000000c009900050000000e00000008000100280000001c00238006001200060000000500050006000000060018000600000024002380080015002e00000006000300b800000005001f000000000008001c000800000008000100490000000c009900090000008000000008000300", @ANYRES32=r0, @ANYBLOB="2c00238005000f000400000005000f0000000000060001006c00000005001300000000000500110001000000"], 0xcc}, 0x1, 0x0, 0x0, 0x20008044}, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) listen(r3, 0x400000001ffffffd) (async) r4 = socket$inet6(0xa, 0x6, 0x0) gettid() (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}}], 0x4000000000000d0, 0x0) 08:53:49 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0xf0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) [ 3032.771426][T11421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3032.777131][T11417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3032.827005][T11426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3032.847231][T11411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3032.915126][T11427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x200000) [ 3033.013385][ T9185] Bluetooth: hci1: command 0x0409 tx timeout 08:53:49 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x300, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) [ 3033.129369][T11434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:50 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @random="57f28c118d3b", @device_b, {0x0, 0x6}}, @a_msdu=[{@device_a, @broadcast, 0xdd, "0a8ee5544b82183ba476c6300454110de53890a0b489c2540b0b5f853e957fec48671bdfca01344c7a77a266d0ffa41c5f6fe657e06071d516796c84eb83c7552389c4b741ebb2eb2f4c118227a91e178b051966db6bf36c1f9732176eb0d966c650aa6277c0afc3ad963e20f266fd8ebeef26d63e44df3066f6436a5f009d056c14d2e20b9a8a7e1f6d0c4063f0f0f81a65c784f9eb448280cfb1e8cfb3ec261ed84e2a7f0fc39df6ba9df749d63ca577902bc1be38998dc47a0dba85748aa191c9821271852c150f58b07ad995ac28523cf36eca3c40e520897df6d0"}]}, 0x104) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="a4ffff"], 0x10) 08:53:50 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xee0f00) [ 3033.342492][T11439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:50 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x312, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3033.416824][T11439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3033.419584][T11444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3033.453290][T11439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3033.528273][T11447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:50 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000040)={0x1, 0x9, 0x7fffffffffffffff}) 08:53:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) [ 3033.596892][T11448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 08:53:50 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000040)={0x1, 0x9, 0x7fffffffffffffff}) 08:53:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 08:53:50 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @random="57f28c118d3b", @device_b, {0x0, 0x6}}, @a_msdu=[{@device_a, @broadcast, 0xdd, "0a8ee5544b82183ba476c6300454110de53890a0b489c2540b0b5f853e957fec48671bdfca01344c7a77a266d0ffa41c5f6fe657e06071d516796c84eb83c7552389c4b741ebb2eb2f4c118227a91e178b051966db6bf36c1f9732176eb0d966c650aa6277c0afc3ad963e20f266fd8ebeef26d63e44df3066f6436a5f009d056c14d2e20b9a8a7e1f6d0c4063f0f0f81a65c784f9eb448280cfb1e8cfb3ec261ed84e2a7f0fc39df6ba9df749d63ca577902bc1be38998dc47a0dba85748aa191c9821271852c150f58b07ad995ac28523cf36eca3c40e520897df6d0"}]}, 0x104) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="a4ffff"], 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @random="57f28c118d3b", @device_b, {0x0, 0x6}}, @a_msdu=[{@device_a, @broadcast, 0xdd, "0a8ee5544b82183ba476c6300454110de53890a0b489c2540b0b5f853e957fec48671bdfca01344c7a77a266d0ffa41c5f6fe657e06071d516796c84eb83c7552389c4b741ebb2eb2f4c118227a91e178b051966db6bf36c1f9732176eb0d966c650aa6277c0afc3ad963e20f266fd8ebeef26d63e44df3066f6436a5f009d056c14d2e20b9a8a7e1f6d0c4063f0f0f81a65c784f9eb448280cfb1e8cfb3ec261ed84e2a7f0fc39df6ba9df749d63ca577902bc1be38998dc47a0dba85748aa191c9821271852c150f58b07ad995ac28523cf36eca3c40e520897df6d0"}]}, 0x104) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="a4ffff"], 0x10) (async) 08:53:50 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x19}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:50 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x500, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3033.950742][T11466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3033.989073][T11469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x2000200) [ 3034.052067][T11474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3034.063484][T11473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3034.064776][T11466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3034.087911][T11472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:50 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]}) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_S390_UCAS_UNMAP(r3, 0x4018ae51, &(0x7f0000000040)={0x1, 0x9, 0x7fffffffffffffff}) [ 3034.110015][T11469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3034.120940][T11475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 08:53:51 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x44100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200000000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000000)={0x5, 0x1}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 08:53:51 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x600, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:51 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x1a}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 08:53:51 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x44100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200000000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000000)={0x5, 0x1}) (async) ioctl$KVM_NMI(r2, 0xae9a) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3034.431259][T11493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:51 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @random="57f28c118d3b", @device_b, {0x0, 0x6}}, @a_msdu=[{@device_a, @broadcast, 0xdd, "0a8ee5544b82183ba476c6300454110de53890a0b489c2540b0b5f853e957fec48671bdfca01344c7a77a266d0ffa41c5f6fe657e06071d516796c84eb83c7552389c4b741ebb2eb2f4c118227a91e178b051966db6bf36c1f9732176eb0d966c650aa6277c0afc3ad963e20f266fd8ebeef26d63e44df3066f6436a5f009d056c14d2e20b9a8a7e1f6d0c4063f0f0f81a65c784f9eb448280cfb1e8cfb3ec261ed84e2a7f0fc39df6ba9df749d63ca577902bc1be38998dc47a0dba85748aa191c9821271852c150f58b07ad995ac28523cf36eca3c40e520897df6d0"}]}, 0x104) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="a4ffff"], 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @random="57f28c118d3b", @device_b, {0x0, 0x6}}, @a_msdu=[{@device_a, @broadcast, 0xdd, "0a8ee5544b82183ba476c6300454110de53890a0b489c2540b0b5f853e957fec48671bdfca01344c7a77a266d0ffa41c5f6fe657e06071d516796c84eb83c7552389c4b741ebb2eb2f4c118227a91e178b051966db6bf36c1f9732176eb0d966c650aa6277c0afc3ad963e20f266fd8ebeef26d63e44df3066f6436a5f009d056c14d2e20b9a8a7e1f6d0c4063f0f0f81a65c784f9eb448280cfb1e8cfb3ec261ed84e2a7f0fc39df6ba9df749d63ca577902bc1be38998dc47a0dba85748aa191c9821271852c150f58b07ad995ac28523cf36eca3c40e520897df6d0"}]}, 0x104) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="a4ffff"], 0x10) (async) [ 3034.507289][T11500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3034.541923][T11496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:51 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x44100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200000000000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000008, 0xfb]}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000/0x1000)=nil}) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) (async, rerun: 32) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000000)={0x5, 0x1}) ioctl$KVM_NMI(r2, 0xae9a) (async, rerun: 32) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) (rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) [ 3034.570553][T11510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3034.586869][T11510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3034.605322][T11510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3034.650705][T11510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3034.669303][T11516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) 08:53:51 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x700, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 3034.841051][T11527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 08:53:51 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x1b}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 08:53:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:53:51 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x7, 0x7, 0x3, 0x23d, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_sa={0x2, 0x1, 0x4d3, 0x1, 0xe4, 0x45, 0x3, 0x80000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x3, {0x6, 0x0, 0x6, 0x3, 0x0, 0x6, 0x0, @in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, @sadb_x_sec_ctx={0x18, 0x18, 0xa1, 0x6, 0xb1, "b5238c20b938f3ab7bd5825d7d1e51f2c011e35c02ec4fe9330869b490307d07b44f7a560d267eeec5c8cf271f32278c8a868827d9460bc085bf0d5643f9304cc8eda4719dacf89fd5e8afbb3dfa546c225610a927f632ce06fed4135a62fb4817df744fd4fa6ec5a6da04f544ef0ce7c4af6bbd3c5e77d1409fbb1e7c2d4cb501e3b2166585e971784f771ea86f17e0dd22f349e4b797c8ebfee71d0a480014f436d1282c6f44e600f117d096a6379385"}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in=@empty, 0x11, 0x4, 0x10}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x14, 0x4}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x14}, @sadb_address={0x5, 0x5, 0xff, 0x80, 0x0, @in6={0xa, 0x4e20, 0x8, @private0, 0x8}}, @sadb_sa={0x2, 0x1, 0x4d2, 0xf8, 0x20, 0x3c, 0x0, 0x60000002}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}]}, 0x11e8}}, 0x4040080) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) [ 3035.084082][T11539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3035.094180][ T4193] Bluetooth: hci1: command 0x041b tx timeout [ 3035.113154][T11543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3035.114694][T11534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:51 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x900, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) 08:53:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x100000000, 0x8002) fcntl$dupfd(r2, 0x406, r1) [ 3035.237786][T11549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x9000000) 08:53:52 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x1c}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:52 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x7, 0x7, 0x3, 0x23d, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_sa={0x2, 0x1, 0x4d3, 0x1, 0xe4, 0x45, 0x3, 0x80000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x3, {0x6, 0x0, 0x6, 0x3, 0x0, 0x6, 0x0, @in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, @sadb_x_sec_ctx={0x18, 0x18, 0xa1, 0x6, 0xb1, "b5238c20b938f3ab7bd5825d7d1e51f2c011e35c02ec4fe9330869b490307d07b44f7a560d267eeec5c8cf271f32278c8a868827d9460bc085bf0d5643f9304cc8eda4719dacf89fd5e8afbb3dfa546c225610a927f632ce06fed4135a62fb4817df744fd4fa6ec5a6da04f544ef0ce7c4af6bbd3c5e77d1409fbb1e7c2d4cb501e3b2166585e971784f771ea86f17e0dd22f349e4b797c8ebfee71d0a480014f436d1282c6f44e600f117d096a6379385"}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in=@empty, 0x11, 0x4, 0x10}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x14, 0x4}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x14}, @sadb_address={0x5, 0x5, 0xff, 0x80, 0x0, @in6={0xa, 0x4e20, 0x8, @private0, 0x8}}, @sadb_sa={0x2, 0x1, 0x4d2, 0xf8, 0x20, 0x3c, 0x0, 0x60000002}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}]}, 0x11e8}}, 0x4040080) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) 08:53:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (async, rerun: 64) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x100000000, 0x8002) (rerun: 64) fcntl$dupfd(r2, 0x406, r1) [ 3035.530838][T11563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3035.535909][T11562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3035.550197][T11561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 08:53:52 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0xe00, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa000000) 08:53:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (async) r2 = syz_open_dev$rtc(&(0x7f0000000000), 0x100000000, 0x8002) fcntl$dupfd(r2, 0x406, r1) [ 3035.707817][T11571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xb000000) 08:53:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000080)=@newtaction={0x14, 0x1e, 0x53b}, 0x14}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:52 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x1d}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:52 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x7, 0x7, 0x3, 0x23d, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_sa={0x2, 0x1, 0x4d3, 0x1, 0xe4, 0x45, 0x3, 0x80000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x3, {0x6, 0x0, 0x6, 0x3, 0x0, 0x6, 0x0, @in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, @sadb_x_sec_ctx={0x18, 0x18, 0xa1, 0x6, 0xb1, "b5238c20b938f3ab7bd5825d7d1e51f2c011e35c02ec4fe9330869b490307d07b44f7a560d267eeec5c8cf271f32278c8a868827d9460bc085bf0d5643f9304cc8eda4719dacf89fd5e8afbb3dfa546c225610a927f632ce06fed4135a62fb4817df744fd4fa6ec5a6da04f544ef0ce7c4af6bbd3c5e77d1409fbb1e7c2d4cb501e3b2166585e971784f771ea86f17e0dd22f349e4b797c8ebfee71d0a480014f436d1282c6f44e600f117d096a6379385"}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in=@empty, 0x11, 0x4, 0x10}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x14, 0x4}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x14}, @sadb_address={0x5, 0x5, 0xff, 0x80, 0x0, @in6={0xa, 0x4e20, 0x8, @private0, 0x8}}, @sadb_sa={0x2, 0x1, 0x4d2, 0xf8, 0x20, 0x3c, 0x0, 0x60000002}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "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"}]}, 0x11e8}}, 0x4040080) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2, 0x7, 0x7, 0x3, 0x23d, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_sa={0x2, 0x1, 0x4d3, 0x1, 0xe4, 0x45, 0x3, 0x80000000}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x3, {0x6, 0x0, 0x6, 0x3, 0x0, 0x6, 0x0, @in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, @sadb_x_sec_ctx={0x18, 0x18, 0xa1, 0x6, 0xb1, "b5238c20b938f3ab7bd5825d7d1e51f2c011e35c02ec4fe9330869b490307d07b44f7a560d267eeec5c8cf271f32278c8a868827d9460bc085bf0d5643f9304cc8eda4719dacf89fd5e8afbb3dfa546c225610a927f632ce06fed4135a62fb4817df744fd4fa6ec5a6da04f544ef0ce7c4af6bbd3c5e77d1409fbb1e7c2d4cb501e3b2166585e971784f771ea86f17e0dd22f349e4b797c8ebfee71d0a480014f436d1282c6f44e600f117d096a6379385"}, @sadb_x_filter={0x5, 0x1a, @in6=@empty, @in=@empty, 0x11, 0x4, 0x10}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x14, 0x4}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9, 0x14}, @sadb_address={0x5, 0x5, 0xff, 0x80, 0x0, @in6={0xa, 0x4e20, 0x8, @private0, 0x8}}, @sadb_sa={0x2, 0x1, 0x4d2, 0xf8, 0x20, 0x3c, 0x0, 0x60000002}, @sadb_key={0x201, 0x9, 0x8000, 0x0, "e6915d1f87e695e37e292f7453b3a9dd7f4c6207139b1c49d1ca7cdcb5c6da797bf16c9cd90f8b0341d289902e9b2cef36d36e227a64c01b28f155e84788e5347eb3c8f93f61a1622860dcdbc6b84e3bf517aa76ab8bd6cbda990d09f7b02d94032ea123895a524d50be991c7f13b2f01a6495849cd2832bd004fa0d716a4a3111fe7acaeda7c990f8e9e4f948ad207947b197453eee79002552afd2f637a5956237bdedb632b449a5575a450f031b0e6b187647720a19fb382b6a407c62adb6f2c632b96eb56a1116d50951ae56479fae2db86672513806938321380fc00239db78613fe4ec62ea96fc160ee4398e853edfea47c449c5d28f4738b018ca44e56fec653d5d011a335221558a894d5bcd443d9e849d76ac5eb3a649629cdf3e3066a626a912d421dc57280e760d018fc81eec8e199479e573b2fc1083e59bbd83ffdffa6554486bbef03b4cb8e3909fc5a9cd88c26804077b671da4cce8ad7dfda6b35309ed7dcc7587f9153a56adb111471993260dfbd2a2c56f6609335ff0d5e364494d1c65be8112ee0f420d855f81033a2bea0fd3a7bba8c8808b31db335fc9e898b0d76446a28c45520c760bb19c80f71263b8dd46b4daf4bb146637564f546a1921d1b5e4c093f59ebd5f950100f6f384961f65a5014b5727799420bd77b3ba4d84b90d2fd94551bcd074cb1a982ae3a0fd7acbf7ef200464a6a90801bd144fec27470d18ca6dc8e6a18155ec5109d6701148c576535522b150ad7475a64ed6025b84822bc1d1e646294587195ff50fc067eeac5496c33cbd954f6fb44ef92dbd2d639286cf2e43c3e907b9274de750ec124c7f30d78349479260615a865607ec10a9fde886a59692f880928bfc4909ba67a50ac69d3f03d5cb0130262c02b3b66d3598fe14744eff95a4604f26a85186c3b1dc80e67368d657cbf3b9dd35cb336a4bb036cf1b85a446437f172976745f443cad30213b9a4f49bca4a0b5ca211a9cbd0a2b967274103b27182771b3eaeeb6f354e0b5c58e030f27a9c713ff71be723de8f69deb2f516f27b59a05294b008c72320e552bf523b20819607ccfe8d0572f2f159d477b4973aac4176dd58b965e31600850f6d70963042f0cde173b90dec7b2d68c295e7460a7f51324d3073d75adbd89be45f21f55ea47c1f5d8574ea5535097ea92d94aa1cfddf4f32ee47481762964151767f3dcb34c9f97394d8d4a1366b283f9d9d3d1e0bc2e9ec3f48b8a86555b9c2deef82fd8bec2f2a370b2cc3bc6e71ec54d79e3cc90f8451991cc4ae71a0bb01184d2e53062e34e06a3b6db0b1d9a7022c021bae76bb862aabd8e9b6f532c9dedc0518cf4c07cbddcca7d4dc20823b71a51d4a5f66db5e7ce5d47279790acf006d97d439b18ee0bd5fd370a1bb2d6f3a3d5d11194872bca4d2a5bcd45e4a39e656bbb824b5a1463edc2fbd8f1b9d59a9b7d019abdbab6e073e24b893475e3ef91028fafaa01146cd7eeac681416219c46949468f8062f03d29cd1af446cb421e451d80880656cc7de218bf782dc96ce1001c3932004e0ebd87854c9714b40b8eef780f3a9d19b08421b0bbc8f8ff4d2defd097531a09da86da95ed50f8aba08a5ab2a814556627d75c5500f0cb2162d8273183eb7f11eb80164d7a0798f5cab5a83e3c95280dff272d7be30dc6dea3af4d46eda9e58b0cb9ff3b5035a3cf51eba6952811b41f10e6997cd379958dad1337fb8d21f7fbdc6c69631235888a662bbf01cd6d61d9ab79a85ca7dbf95a4213e056e22a4ea3f975d5cc0e9e79c984a5b7a2c9d044e6460968095a77d7bb4bf230ab1ff0162838bd74d06378521da1134eac7bd3e5d6f80028e7e09945f0c5563a23eb7c8d173c856c6a5a0bcf5cbe62b4aa4bc12c0192e74900e0f973a099f5135c0ffbe1b6a9513dfaefe2a9032c2c333b3cbad8180b0d3a9d083f886e88733386a2ab8c03e7094d9793d1d98e0eaa9e7610ea53e7eb4e3fd882687e517e366190bd177597a3684b33bfecd95715c1fa2c9028578e6f60f50092af11079ef84a524b2a746730ed6e758355a418301a1e8b121263defe9182c3dc9690dbfeef78e3b323d4ae0b503f522548df4f508c02cae9190e271603779636ce93fa76bb034d3e967cf63b34867cfb297cb46b5a611eb9e858739463a1337cc07810dba0a7c341308bdb00f1d251c05fbaa18a1807597a6bf7e206055559ac840a8d9f5620990be2bf3453ede49b5159a414f122ee1e5d9cfb6dc48c58ed1c15393e86ebbfd5b38433d8b6659d05e54f33bd96f0b0cb80c5ad37e58580eb7a0b7ff2acd40c4cd71856361f3921f3304f9dc757a89c3e8142ccc2d155f41428e533e34277f3e505914d5415151b5accc923b07fb343e228b37e321585810aabddb6364815de335ea066563bf6f64197a7631c968e60598ce83424fb629e1a4e8c54e1362ffaa5de3c2c4e55d9377014c542315659921108189a0c8557b53042e06a421787bd86a6583af9a73c40e1addfc46ea01ee93fd266a46c1d68a0798ac1f82053a8a14ec89f73553d839f0169208fc9fc7245cfe5055facc1aa7eb5cb55dd67b4c213948b6257d45e7f68678f351e60b94e57fdf66dcc5abdfc3a9c675ab3e628e189d0389c40f4d39a58678b85debdd44e9e79a5f87a79d21e7ee78dbcfa8fbfd79bd0cb96edd5e56a65e463dc192105fb807820bcff5e364811129c7630531d91cc77ab0e69f9483dc04e2ff831e25607123fb621a2d04b5e15fc444079cdb5831f53ee1a6a2793437070ed44d0d2627b411afe26b861537693fe712005fb8fca15130518fc2b2e490a31ec180a539bd4960b903214178c95b1b9d89326b077c7ea5f387da03d74d09b652d1c47700411a45dbf0de69a5aac3ce390bee76366fa61346a56cde5497bee33cf2eda383a7223b3613c7e71e6b0577ba80a0c7ea9756608f3b9b35b0cf10c93feaa953de3b79cfcad99897de7c605af36232f951bbc9b96946363f78f447925b5e40f1f408a0033b8911fd55884ddd527f3a6aa6e7c11efba31c37b7ba4603f37386e8497b721163cb388e3eb3ac412787e59b87736948c5adff1433c2ae3727c308b31760ba02a14a67c3e85a12adc535926b8de15dcd5c3e9fa5945d863fb3b880e00ce665ea0198b425fad143efa7c5d378da66ec82833545cd7aa8579c43e0ee75d942c089655c1ebcd71125d2317200b4cdb8fc99bacdd86292c97f08e830c539673cbba1312a6bfb5c2f5db3732d3529f85e244f2fe1554229140edd48af3db7df1c743fe1cae7bc957e7962cb014001058352801ef8d7ad44b2e207c30ea4b62c84b866e118dc638b2b2314f8468ecbcb5a14e3354d88330ba38a7b37f0a81dfb404fc7dfd38df71603fbdf3e7be1462b7e1d8c8d32be65d68e78646f5b7bd932cb44bf6e509ee8525ea5a3b8514a01356ab5bac789497d75353a2534796df1306df248afa272aaf4f66b75acd3026b4130fdbe8c6559b5fc8de08a6623216faf76c9f82de3e63cc67c4cfe1b83617bdd86a371a47076127ca0308a2c6958e4d8926d6f8d522a2931fcba8164a7e6204ff60a3a394cfcb340b41608d1b49126153fdcf7fcd4fbdc187329444cf0cca0929931f982d8cce43094376c87c13a5c50ad70d3329a686a799353f6ef480ef5b4806ea591708c99a0252198244ba779bf4fe30b833f394f76a0cd8090f679ac32ab2aacedbc1cb3b094e275e6bcbd8f0de59fefd313b72ddece71c4872666de8da153966c4cb1e28fd4e637d12c1e64ed4eb9539f5419ddd0db0533e510236671882cd3fb0a864eb86227e58d62a5283dae3a7f94602027f9d68f2d876772bfadf9265b8fe5e2eb9e3b89c6d3edc4f674e13339479e62ae3d4a6a330aa08ec8577194c49b4a1b9df70d7f4072a16caaf75097073ddcfeb4c629e158111204df5741db331d8d675debdf33e2456d5afd810af9ab85a10fe40d5261db3d64201e07730c39369b79903a9eb3ddfdccd0d987f883339136fec7b67383de315b3915c23d2ff3097767e313d13097d7debee8387409d401af2d64abc6f8520a25007532bbe99dd95ba2cb19f6a8b6b0552fe0e8ed4d5bd658b878e30e4756a21ce5b6ed3235ced02956e142edabb974c4dd45fb02e13560530846600836b239122d24e740ced84c76015e8fb3e2c9418ac64feb2aee0eecd86e117adc771f2b1c2e7082519270cd1c942cca8451c71d30856d00fcc0062f1dddf8ef9a1bc841b533f074916ec06c0603393db6afda8e867ac1949b30031539336efc9db13892bda3a115ac0b5f90865a74e9004e16d17e03344c4a8a8ad590385b545754e0b547d89c2e7ec98610df560c72eeddc7ff5fd4d095d06b3a1d1cd8400c869dce605e48ae5f2b6927a307497a68e7fdaf478a4012a72fadbd4633a198dfcd53943ebdff0ddf42af4320fe636d18c1ceca079b4b15b40fb2e571d438ba3f433af5a67df6c17a1ae7cf33a33de80c1a7acf17dd7836645d0667693994d07495e39b0282ba91c669a773a6eceda96c81a15afde18cec74cb4b511885c678fe5d3473bfba36f8fb15d6dbcb088c1fa65c515edce9ab3c5522406684844972fa3b49d9ee840e120f53922c53e0ff6cccd5d2edf46019213e2ee50d1586e3d41443e994ebb1edeb49c06f2c0e9b88ebd123823f9b37e5e04f502b9fc0b1ae544b792ed67d433eb02d73a61a70b87bd697de1d28cd793d4c7d61b81024738d9457dd21e7688d272c412a95078439bacf4d8cc71070cc083ffff732a704a2bb0fa44a3f0ec14c6997538363ca4bad918d7813af980199bb8018d8ee34e52fe271bf7a9d0b2f27ba5288c148e881eb647358f22037c277577db9fd4d7806316bf45c8ff9ac2b51f23a7494510fdfd01ca7a1a42dbb7ac06bf205cf3da923d351986f64d4ab7ffe56bea85d6925adba51e06ea713e4c9ef9b1ee64871ad3484806f2deeb2f47bc29f996e8af0118fda668b5fa6f5bd9ecbca0915f189f3805c275f7502880bff228501620d06318317e47388f70c2a1eb101d81538cf5c047cad02c74942ad5bc9a76832e2c0f9bc54dd78d89c414c0602b13eadee79d5374db06a70b2a65fdd016ab2deeb22241728adcb4b06b8b06ee24ebbc7722daa40b7a8b66cfec459cd146e1eeb0a56c22e5e16a50ff260108dc580b6e2dd0e395a8308e5e4ccf464dfda35e9ffe15eff133b3c555f9d429c6a03f74f23f4fb6605592b71faf6c180950a25b7a82325f07f4facd4db593f40366b639a6a215297428069fc74f4396c7879ce4a35b5135da78640695a3d2fdb47cb140bce5a43dbf9e6749023a99cba62bfb01538cd18a451716d8d8aa7bdcad1f3f804f775f25a4b23aada214342f73f585d9073bc642fe06e0593e1165d86ec8c0ff9cdad5f1fb64a90e3d0bc6acce555aafdeeec149a64909b535e19a71f960706fd8a7348447d05c7d8b421762fd01514c092401bcdb636ba7c40439f9bc0f723a9e0c3f938aafbfcc10e359ba3615bcd987c379e3c46c9a279daef3d6090b2f5be6e17aa1674dcb2621e3dc9dd54cc75ae2988f77ef1d55a9fc302f5c2de1d27b34bb7f28372a1d093338185aa2a922f3879b9fb7fa0bf2979fdc106324d9e4925aedbcb2a933b5e501e1a68008c9f03b61dceeb9d44d40ee110248c3b0534fae72323e9f88d8af700e4f7495e02011e9ccc1742c4c65e59cd8343e05e31b93d6a1386461ed6bc65c91c8454e91bc42e6d984884d12a68ca4c7f4ffebcb8ab4b6360b0668802310774f8b5"}]}, 0x11e8}}, 0x4040080) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) [ 3035.921486][T11587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3035.951194][T11584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3035.982410][T11592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000080)=@newtaction={0x14, 0x1e, 0x53b}, 0x14}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000080)=@newtaction={0x14, 0x1e, 0x53b}, 0x14}}, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (async) [ 3036.032039][T11593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xc000000) 08:53:52 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0xf00, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3036.160988][T11604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000080)=@newtaction={0x14, 0x1e, 0x53b}, 0x14}}, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 08:53:53 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x1e}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xd000000) 08:53:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4a4100, 0x40) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:53 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x486400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r3, @ANYBLOB="eef24c309ca63cdbcb735f8fce861fd56dbe61b3ad88cd0000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3fde9211, 0x5f}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3ae73e759348a389208a8c50b1"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x5c}}, 0x48000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000e00c61cc66ef7e565795118b93be514a9d66723", @ANYRES16=r8, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r8, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x44000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000200)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @random="bc8c434d9e4d", @broadcast, {0x8, 0x7}}, {0x9, 0x0, 0x0, 0x0, 0x8}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x3}, @device_b, @initial, @random="91c369c36ba8", {0x2, 0x9}}, {0x9, 0x0, 0x0, 0x1, 0x1}}}, @a_msdu=[{@device_a, @device_b, 0x87, "642ac70b5e34dc3c85cd5f5922cabb779b5c453fe858768bb059438ed88ec4b0b50b21f6ff0b165c389588dd725ec87f657edee390309cbdced2e8ac246052ebb4e23a162e8782215f803dcaa86fc1a8715553247bed3a0afbca2b379bc7ffa065795ee2a5eeafe88e5d08c6e3ad9d7dc9faa0df605500ef272e1765e3a96bea5d386178ebd54f"}]}, 0xcc) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_b, @device_b, @from_mac=@broadcast, {0x4, 0x81}}, @ver_80211n={0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x100, 0x17, @default, @val={0x1, 0x8, [{0x24, 0x1}, {0x6c}, {0x4, 0x1}, {0x12, 0x1}, {0xa, 0x1}, {0x30}, {0x2, 0x1}, {0xb, 0x1}]}, @void, [{0xdd, 0xc1, "70e68e3976c66d829041235bc58a547e5e998feae0c75294653f40b9bb773687f58118730e0e0e439b61b228910aa9984e19129a11ccf34e984da8279e03f36c97ac5e5e04eaba8b738b70ffdbe016da3a97ea7ad5d0fac9beb36ac1a01e6d582c92e6164b140a2e717746dd4f3b2bcd3fc6331507abc7e0723e4123e7460eff6023cfe5e6f83454472a846a3c33a02f36a59be8748e6c322a08ad758e5ae5f4c69d64b8701365871e810ef20523cae6f2b0c998a68704a8e17a51348f934e5912"}, {0xdd, 0x7b, "e3aa05dac15085b622ab853b7a2b4cda1c12d53b0cfeab0c5c80c23bbc7f6d8caaf91c7aec7df6a3c767893dee69b1ba05959e045d13d923d0bf469132cafa8c481d08486bcd15c9771215b37c1fc159630a01ccd3af5b8c5c512a58357c687b88249b60767563cdf4c0ac306e19a4026c9c9806447f59fb86940b"}]}, 0x16c) [ 3036.368209][T11615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:53 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1100, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3036.458813][T11614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3036.472546][T11625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4a4100, 0x40) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x4a4100, 0x40) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (async) 08:53:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xe000000) [ 3036.534393][T11625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3036.544985][T11628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3036.558606][T11625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 08:53:53 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x21}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:53 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1200, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4a4100, 0x40) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3036.825672][T11645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3036.842066][T11644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3036.931102][T11647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x2) 08:53:53 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x486400, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r3, @ANYBLOB="eef24c309ca63cdbcb735f8fce861fd56dbe61b3ad88cd0000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3fde9211, 0x5f}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3ae73e759348a389208a8c50b1"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x5c}}, 0x48000) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x2c}}, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000e00c61cc66ef7e565795118b93be514a9d66723", @ANYRES16=r8, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r8, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x44000) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000200)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @random="bc8c434d9e4d", @broadcast, {0x8, 0x7}}, {0x9, 0x0, 0x0, 0x0, 0x8}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x3}, @device_b, @initial, @random="91c369c36ba8", {0x2, 0x9}}, {0x9, 0x0, 0x0, 0x1, 0x1}}}, @a_msdu=[{@device_a, @device_b, 0x87, "642ac70b5e34dc3c85cd5f5922cabb779b5c453fe858768bb059438ed88ec4b0b50b21f6ff0b165c389588dd725ec87f657edee390309cbdced2e8ac246052ebb4e23a162e8782215f803dcaa86fc1a8715553247bed3a0afbca2b379bc7ffa065795ee2a5eeafe88e5d08c6e3ad9d7dc9faa0df605500ef272e1765e3a96bea5d386178ebd54f"}]}, 0xcc) (async) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_b, @device_b, @from_mac=@broadcast, {0x4, 0x81}}, @ver_80211n={0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x100, 0x17, @default, @val={0x1, 0x8, [{0x24, 0x1}, {0x6c}, {0x4, 0x1}, {0x12, 0x1}, {0xa, 0x1}, {0x30}, {0x2, 0x1}, {0xb, 0x1}]}, @void, [{0xdd, 0xc1, "70e68e3976c66d829041235bc58a547e5e998feae0c75294653f40b9bb773687f58118730e0e0e439b61b228910aa9984e19129a11ccf34e984da8279e03f36c97ac5e5e04eaba8b738b70ffdbe016da3a97ea7ad5d0fac9beb36ac1a01e6d582c92e6164b140a2e717746dd4f3b2bcd3fc6331507abc7e0723e4123e7460eff6023cfe5e6f83454472a846a3c33a02f36a59be8748e6c322a08ad758e5ae5f4c69d64b8701365871e810ef20523cae6f2b0c998a68704a8e17a51348f934e5912"}, {0xdd, 0x7b, "e3aa05dac15085b622ab853b7a2b4cda1c12d53b0cfeab0c5c80c23bbc7f6d8caaf91c7aec7df6a3c767893dee69b1ba05959e045d13d923d0bf469132cafa8c481d08486bcd15c9771215b37c1fc159630a01ccd3af5b8c5c512a58357c687b88249b60767563cdf4c0ac306e19a4026c9c9806447f59fb86940b"}]}, 0x16c) 08:53:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x10000000) 08:53:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) [ 3037.035046][T11656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.041222][T11657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.101607][T11663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x10400000) 08:53:53 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x22}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3037.176576][ T4193] Bluetooth: hci1: command 0x040f tx timeout 08:53:54 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1203, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3037.296911][T11675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.318272][T11674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.335931][T11677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1f000000) 08:53:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 64) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 32) 08:53:54 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000340), 0x486400, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r3, @ANYBLOB="eef24c309ca63cdbcb735f8fce861fd56dbe61b3ad88cd0000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380), 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r1, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3fde9211, 0x5f}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3ae73e759348a389208a8c50b1"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x5c}}, 0x48000) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x2c}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000e00c61cc66ef7e565795118b93be514a9d66723", @ANYRES16=r8, @ANYBLOB="010000000000000000001100000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r8, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x44000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000200)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {}, @device_b, @random="bc8c434d9e4d", @broadcast, {0x8, 0x7}}, {0x9, 0x0, 0x0, 0x0, 0x8}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x3}, @device_b, @initial, @random="91c369c36ba8", {0x2, 0x9}}, {0x9, 0x0, 0x0, 0x1, 0x1}}}, @a_msdu=[{@device_a, @device_b, 0x87, "642ac70b5e34dc3c85cd5f5922cabb779b5c453fe858768bb059438ed88ec4b0b50b21f6ff0b165c389588dd725ec87f657edee390309cbdced2e8ac246052ebb4e23a162e8782215f803dcaa86fc1a8715553247bed3a0afbca2b379bc7ffa065795ee2a5eeafe88e5d08c6e3ad9d7dc9faa0df605500ef272e1765e3a96bea5d386178ebd54f"}]}, 0xcc) (async, rerun: 32) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @device_b, @device_b, @from_mac=@broadcast, {0x4, 0x81}}, @ver_80211n={0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x100, 0x17, @default, @val={0x1, 0x8, [{0x24, 0x1}, {0x6c}, {0x4, 0x1}, {0x12, 0x1}, {0xa, 0x1}, {0x30}, {0x2, 0x1}, {0xb, 0x1}]}, @void, [{0xdd, 0xc1, "70e68e3976c66d829041235bc58a547e5e998feae0c75294653f40b9bb773687f58118730e0e0e439b61b228910aa9984e19129a11ccf34e984da8279e03f36c97ac5e5e04eaba8b738b70ffdbe016da3a97ea7ad5d0fac9beb36ac1a01e6d582c92e6164b140a2e717746dd4f3b2bcd3fc6331507abc7e0723e4123e7460eff6023cfe5e6f83454472a846a3c33a02f36a59be8748e6c322a08ad758e5ae5f4c69d64b8701365871e810ef20523cae6f2b0c998a68704a8e17a51348f934e5912"}, {0xdd, 0x7b, "e3aa05dac15085b622ab853b7a2b4cda1c12d53b0cfeab0c5c80c23bbc7f6d8caaf91c7aec7df6a3c767893dee69b1ba05959e045d13d923d0bf469132cafa8c481d08486bcd15c9771215b37c1fc159630a01ccd3af5b8c5c512a58357c687b88249b60767563cdf4c0ac306e19a4026c9c9806447f59fb86940b"}]}, 0x16c) (rerun: 32) [ 3037.542296][T11686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.573072][T12003] Bluetooth: hci0: command 0x0406 tx timeout [ 3037.580746][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) 08:53:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x23}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3037.624054][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.698027][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.722721][T11702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.789781][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.792087][T11701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x3) 08:53:54 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1400, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x29000000) [ 3037.878761][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.911821][T11714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.947540][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3037.998918][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x34000000) [ 3038.071914][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.134511][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:54 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x24}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:55 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1500, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3038.195766][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.270813][T11738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.285974][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x3d0a0000) [ 3038.314686][T11743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.329403][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.357618][T11737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.401796][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.466879][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.517965][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.548351][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x4a000000) [ 3038.576360][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.597009][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.618191][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.645296][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.664758][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.677638][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.689429][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3038.701575][T11685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3039.254537][ T9185] Bluetooth: hci1: command 0x0419 tx timeout 08:53:57 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1600, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) 08:53:57 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x25}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x4) 08:53:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x80080000) 08:53:57 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000340)=@mgmt_frame=@beacon={@with_ht={{{}, {0xaa}, @broadcast, @device_a, @initial, {0x7, 0x4c4}}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xffffffffffff921e, @default, 0x210, @val={0x0, 0x1c, @random="536f12dc4679344b1743c80090f9c329eca8517f5141443d2e020218"}, @void, @void, @val={0x4, 0x6, {0x2, 0xd6, 0x5, 0x800}}, @void, @val={0x5, 0xf6, {0x4, 0x14, 0x57, "e8304a244449b630c9ae9bb64bb608a41e4bf857338f3e56cbea66f2c27af6910b42e17f3ab1d64cd913e25e9072cd1f8f49ec469e275ee2537f27fca914553e4610f31bdc4cb4257c5506914f0129724087299a21e6b711a1682502175f728eaad11edb147455b1b9bc7a9051db0fb3ac5e83ed966f3a03a9affde16bc32c082d6f7cf50e078b84f280768bbce37382b0e49ebc65407fa353a1366e59c62d03c1856dd21d30b1c8ac1aa22f23be145ea60c6faaff875cdae5296bfa666c01182c2d341cf6a4fefff808e16fb0b03eda29e124a230757c4779edd7042f38fdbad0dded3ecc8393edb3bcfbe9f31d8b12406360"}}, @val={0x25, 0x3, {0x1, 0x0, 0x61}}, @void, @val={0x3c, 0x4, {0x1, 0x2f, 0xb1, 0x1}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x7f}}, @val={0x76, 0x6, {0x4, 0x5, 0x14, 0xff}}, [{0xdd, 0x88, "da1107e3188dd1ae5c45c30a4d9fde90702dd8b5ae7e8065ae9356db1d21ebba25e666cb2b0fbe601b53b001f525e1c0fff240f35ea441fa0142ba3b5c769f0c170bcb438b7092adb32596ca51fa18863d7dedcf7258519d5048ce56083050e33f816efe362402b316e0e5454008971b40a4c0144745e3ce483365f9ea0bc43b6d65dd61cfe635a3"}, {0xdd, 0xe8, "4bd062a984f7657cfd725176e7aa1dd1706b2713e9369e02cc7ccd7e874333f9bb3381cba6c22d0d56121cf6e0992512ca40d6b63505f9b18aea937cbbee7492f3441665f51b446ab7e974eb472ad5d3d79d0be69deccd721037e065b69d7a3e945d0611f91128255161efcc91255fdd1a77fda70ab92766e7b13b91e14ab5de84f78037b5b538a279b1371d1b9ba2e4ea682ff35eb86cd6ec0aedc49158ca70a390429e41c1b63567f59e50458ab67496b906c649e6020a9f66ec4f1318dd562f910d305c86a75ca7523e1cf131a1bb060455a3c8831ee8b0fc7a86c01a4557d5e28d22d059ca3e"}]}, 0x2de) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @broadcast}, 0x10) [ 3040.630215][T11763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3040.641386][T11768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3040.651411][T11765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3040.667456][T11768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3040.675912][T11764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3040.689929][T11768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3040.764364][T11779] warn_alloc: 1 callbacks suppressed [ 3040.764382][T11779] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 3040.803043][T11779] CPU: 1 PID: 11779 Comm: syz-executor.1 Not tainted 5.17.0-rc6-syzkaller-00228-gac84e82f78cb #0 [ 3040.813566][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3040.823630][T11779] Call Trace: [ 3040.826914][T11779] [ 3040.829856][T11779] dump_stack_lvl+0xcd/0x134 [ 3040.834470][T11779] warn_alloc.cold+0x9b/0x189 [ 3040.839168][T11779] ? zone_watermark_ok_safe+0x290/0x290 [ 3040.844727][T11779] ? find_held_lock+0x2d/0x110 [ 3040.849514][T11779] ? lock_downgrade+0x6e0/0x6e0 [ 3040.854409][T11779] ? __vmalloc_node_range+0x7bf/0x1060 [ 3040.859900][T11779] __vmalloc_node_range+0xe18/0x1060 [ 3040.865218][T11779] ? vfree_atomic+0xe0/0xe0 [ 3040.869744][T11779] ? vfs_fileattr_set+0xbe0/0xbe0 [ 3040.874788][T11779] ? kvm_dev_ioctl+0x1a4/0x1c00 [ 3040.879654][T11779] __vmalloc+0x69/0x80 [ 3040.883742][T11779] ? kvm_dev_ioctl+0x1a4/0x1c00 [ 3040.888613][T11779] ? kvm_stat_data_open+0x380/0x380 [ 3040.893826][T11779] kvm_dev_ioctl+0x1a4/0x1c00 [ 3040.898522][T11779] ? __context_tracking_exit+0xb8/0xe0 [ 3040.904020][T11779] ? kvm_stat_data_open+0x380/0x380 [ 3040.909244][T11779] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 3040.915501][T11779] ? kvm_stat_data_open+0x380/0x380 [ 3040.920692][T11779] __x64_sys_ioctl+0x193/0x200 [ 3040.925457][T11779] do_syscall_64+0x35/0xb0 [ 3040.929864][T11779] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3040.935741][T11779] RIP: 0033:0x7f4360e75049 [ 3040.940143][T11779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 08:53:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xa0050000) [ 3040.959751][T11779] RSP: 002b:00007f435f7c9168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3040.968153][T11779] RAX: ffffffffffffffda RBX: 00007f4360f88030 RCX: 00007f4360e75049 [ 3040.976113][T11779] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 3040.984083][T11779] RBP: 00007f4360ecf08d R08: 0000000000000000 R09: 0000000000000000 [ 3040.992039][T11779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3040.999995][T11779] R13: 00007f43614bbb1f R14: 00007f435f7c9300 R15: 0000000000022000 [ 3041.007978][T11779] [ 3041.037784][T11779] Mem-Info: [ 3041.045500][T11779] active_anon:875 inactive_anon:84072 isolated_anon:0 [ 3041.045500][T11779] active_file:4374 inactive_file:9917 isolated_file:0 [ 3041.045500][T11779] unevictable:768 dirty:11 writeback:0 [ 3041.045500][T11779] slab_reclaimable:21914 slab_unreclaimable:97908 [ 3041.045500][T11779] mapped:30856 shmem:2493 pagetables:1330 bounce:0 [ 3041.045500][T11779] kernel_misc_reclaimable:0 [ 3041.045500][T11779] free:1378952 free_pcp:6898 free_cma:0 [ 3041.091795][T11779] Node 0 active_anon:3492kB inactive_anon:335356kB active_file:17424kB inactive_file:39668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123424kB dirty:40kB writeback:0kB shmem:7496kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB kernel_stack:11796kB pagetables:5316kB all_unreclaimable? no 08:53:57 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x26}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:57 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1700, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:57 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000340)=@mgmt_frame=@beacon={@with_ht={{{}, {0xaa}, @broadcast, @device_a, @initial, {0x7, 0x4c4}}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xffffffffffff921e, @default, 0x210, @val={0x0, 0x1c, @random="536f12dc4679344b1743c80090f9c329eca8517f5141443d2e020218"}, @void, @void, @val={0x4, 0x6, {0x2, 0xd6, 0x5, 0x800}}, @void, @val={0x5, 0xf6, {0x4, 0x14, 0x57, "e8304a244449b630c9ae9bb64bb608a41e4bf857338f3e56cbea66f2c27af6910b42e17f3ab1d64cd913e25e9072cd1f8f49ec469e275ee2537f27fca914553e4610f31bdc4cb4257c5506914f0129724087299a21e6b711a1682502175f728eaad11edb147455b1b9bc7a9051db0fb3ac5e83ed966f3a03a9affde16bc32c082d6f7cf50e078b84f280768bbce37382b0e49ebc65407fa353a1366e59c62d03c1856dd21d30b1c8ac1aa22f23be145ea60c6faaff875cdae5296bfa666c01182c2d341cf6a4fefff808e16fb0b03eda29e124a230757c4779edd7042f38fdbad0dded3ecc8393edb3bcfbe9f31d8b12406360"}}, @val={0x25, 0x3, {0x1, 0x0, 0x61}}, @void, @val={0x3c, 0x4, {0x1, 0x2f, 0xb1, 0x1}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x7f}}, @val={0x76, 0x6, {0x4, 0x5, 0x14, 0xff}}, [{0xdd, 0x88, "da1107e3188dd1ae5c45c30a4d9fde90702dd8b5ae7e8065ae9356db1d21ebba25e666cb2b0fbe601b53b001f525e1c0fff240f35ea441fa0142ba3b5c769f0c170bcb438b7092adb32596ca51fa18863d7dedcf7258519d5048ce56083050e33f816efe362402b316e0e5454008971b40a4c0144745e3ce483365f9ea0bc43b6d65dd61cfe635a3"}, {0xdd, 0xe8, "4bd062a984f7657cfd725176e7aa1dd1706b2713e9369e02cc7ccd7e874333f9bb3381cba6c22d0d56121cf6e0992512ca40d6b63505f9b18aea937cbbee7492f3441665f51b446ab7e974eb472ad5d3d79d0be69deccd721037e065b69d7a3e945d0611f91128255161efcc91255fdd1a77fda70ab92766e7b13b91e14ab5de84f78037b5b538a279b1371d1b9ba2e4ea682ff35eb86cd6ec0aedc49158ca70a390429e41c1b63567f59e50458ab67496b906c649e6020a9f66ec4f1318dd562f910d305c86a75ca7523e1cf131a1bb060455a3c8831ee8b0fc7a86c01a4557d5e28d22d059ca3e"}]}, 0x2de) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @broadcast}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000340)=@mgmt_frame=@beacon={@with_ht={{{}, {0xaa}, @broadcast, @device_a, @initial, {0x7, 0x4c4}}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xffffffffffff921e, @default, 0x210, @val={0x0, 0x1c, @random="536f12dc4679344b1743c80090f9c329eca8517f5141443d2e020218"}, @void, @void, @val={0x4, 0x6, {0x2, 0xd6, 0x5, 0x800}}, @void, @val={0x5, 0xf6, {0x4, 0x14, 0x57, "e8304a244449b630c9ae9bb64bb608a41e4bf857338f3e56cbea66f2c27af6910b42e17f3ab1d64cd913e25e9072cd1f8f49ec469e275ee2537f27fca914553e4610f31bdc4cb4257c5506914f0129724087299a21e6b711a1682502175f728eaad11edb147455b1b9bc7a9051db0fb3ac5e83ed966f3a03a9affde16bc32c082d6f7cf50e078b84f280768bbce37382b0e49ebc65407fa353a1366e59c62d03c1856dd21d30b1c8ac1aa22f23be145ea60c6faaff875cdae5296bfa666c01182c2d341cf6a4fefff808e16fb0b03eda29e124a230757c4779edd7042f38fdbad0dded3ecc8393edb3bcfbe9f31d8b12406360"}}, @val={0x25, 0x3, {0x1, 0x0, 0x61}}, @void, @val={0x3c, 0x4, {0x1, 0x2f, 0xb1, 0x1}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x7f}}, @val={0x76, 0x6, {0x4, 0x5, 0x14, 0xff}}, [{0xdd, 0x88, "da1107e3188dd1ae5c45c30a4d9fde90702dd8b5ae7e8065ae9356db1d21ebba25e666cb2b0fbe601b53b001f525e1c0fff240f35ea441fa0142ba3b5c769f0c170bcb438b7092adb32596ca51fa18863d7dedcf7258519d5048ce56083050e33f816efe362402b316e0e5454008971b40a4c0144745e3ce483365f9ea0bc43b6d65dd61cfe635a3"}, {0xdd, 0xe8, "4bd062a984f7657cfd725176e7aa1dd1706b2713e9369e02cc7ccd7e874333f9bb3381cba6c22d0d56121cf6e0992512ca40d6b63505f9b18aea937cbbee7492f3441665f51b446ab7e974eb472ad5d3d79d0be69deccd721037e065b69d7a3e945d0611f91128255161efcc91255fdd1a77fda70ab92766e7b13b91e14ab5de84f78037b5b538a279b1371d1b9ba2e4ea682ff35eb86cd6ec0aedc49158ca70a390429e41c1b63567f59e50458ab67496b906c649e6020a9f66ec4f1318dd562f910d305c86a75ca7523e1cf131a1bb060455a3c8831ee8b0fc7a86c01a4557d5e28d22d059ca3e"}]}, 0x2de) (async) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @broadcast}, 0x10) (async) [ 3041.169941][T11779] Node 1 active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2476kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:4kB all_unreclaimable? no 08:53:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xfb7f0000) [ 3041.249920][T11793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3041.261495][T11791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3041.263342][T11795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3041.292266][T11790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3041.294963][T11779] Node 0 DMA free:15360kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3041.348043][T11779] lowmem_reserve[]: 0 2645 2645 2645 2645 [ 3041.351373][T11799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3041.356747][T11779] Node 0 DMA32 free:1559064kB boost:0kB min:35676kB low:44592kB high:53508kB reserved_highatomic:0KB active_anon:3492kB inactive_anon:335256kB active_file:22024kB inactive_file:28368kB unevictable:1536kB writepending:40kB present:3129332kB managed:2716640kB mlocked:0kB bounce:0kB free_pcp:26820kB local_pcp:6824kB free_cma:0kB 08:53:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x5) [ 3041.399237][T11795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3041.401382][T11779] lowmem_reserve[]: [ 3041.431716][T11799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3041.435302][T11801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3041.439273][T11779] 0 [ 3041.445830][T11800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3041.468128][T11779] 0 0 0 0 [ 3041.471357][T11779] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:400kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 08:53:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xff000000) [ 3041.500833][T11779] lowmem_reserve[]: 0 0 0 0 0 [ 3041.506271][T11779] Node 1 Normal free:3948308kB boost:0kB min:54224kB low:67780kB high:81336kB reserved_highatomic:0KB active_anon:8kB inactive_anon:932kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3041.544543][T11779] lowmem_reserve[]: 0 0 0 0 0 [ 3041.559535][T11779] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3041.578061][T11779] Node 0 DMA32: 4743*4kB (UME) 4820*8kB (UME) 2090*16kB (UME) 1143*32kB (UME) 336*64kB (UM) 152*128kB (UME) 202*256kB (UM) 136*512kB (UM) 105*1024kB (UM) 62*2048kB (UME) 253*4096kB (UME) = 1560636kB [ 3041.622899][T11779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3041.675000][T11779] Node 1 Normal: 197*4kB (UE) 40*8kB (UME) 34*16kB (UE) 169*32kB (UE) 90*64kB (UME) 22*128kB (UME) 14*256kB (U) 6*512kB (UE) 0*1024kB 3*2048kB (ME) 957*4096kB (M) = 3948308kB [ 3041.693092][T11779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3041.702834][T11779] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3041.712228][T11779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3041.737449][T11779] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3041.749671][T11779] 15861 total pagecache pages [ 3041.760426][T11779] 0 pages in swap cache [ 3041.767448][T11779] Swap cache stats: add 0, delete 0, find 0/0 [ 3041.775243][T11779] Free swap = 0kB [ 3041.789493][T11779] Total swap = 0kB [ 3041.801352][T11779] 2097051 pages RAM [ 3041.812263][T11779] 0 pages HighMem/MovableOnly [ 3041.818647][T11779] 384546 pages reserved [ 3041.839880][T11779] 0 pages cma reserved 08:53:58 executing program 1: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x20, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:58 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x27}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:58 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1800, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xff010000) 08:53:58 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000340)=@mgmt_frame=@beacon={@with_ht={{{}, {0xaa}, @broadcast, @device_a, @initial, {0x7, 0x4c4}}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xffffffffffff921e, @default, 0x210, @val={0x0, 0x1c, @random="536f12dc4679344b1743c80090f9c329eca8517f5141443d2e020218"}, @void, @void, @val={0x4, 0x6, {0x2, 0xd6, 0x5, 0x800}}, @void, @val={0x5, 0xf6, {0x4, 0x14, 0x57, "e8304a244449b630c9ae9bb64bb608a41e4bf857338f3e56cbea66f2c27af6910b42e17f3ab1d64cd913e25e9072cd1f8f49ec469e275ee2537f27fca914553e4610f31bdc4cb4257c5506914f0129724087299a21e6b711a1682502175f728eaad11edb147455b1b9bc7a9051db0fb3ac5e83ed966f3a03a9affde16bc32c082d6f7cf50e078b84f280768bbce37382b0e49ebc65407fa353a1366e59c62d03c1856dd21d30b1c8ac1aa22f23be145ea60c6faaff875cdae5296bfa666c01182c2d341cf6a4fefff808e16fb0b03eda29e124a230757c4779edd7042f38fdbad0dded3ecc8393edb3bcfbe9f31d8b12406360"}}, @val={0x25, 0x3, {0x1, 0x0, 0x61}}, @void, @val={0x3c, 0x4, {0x1, 0x2f, 0xb1, 0x1}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x7f}}, @val={0x76, 0x6, {0x4, 0x5, 0x14, 0xff}}, [{0xdd, 0x88, "da1107e3188dd1ae5c45c30a4d9fde90702dd8b5ae7e8065ae9356db1d21ebba25e666cb2b0fbe601b53b001f525e1c0fff240f35ea441fa0142ba3b5c769f0c170bcb438b7092adb32596ca51fa18863d7dedcf7258519d5048ce56083050e33f816efe362402b316e0e5454008971b40a4c0144745e3ce483365f9ea0bc43b6d65dd61cfe635a3"}, {0xdd, 0xe8, "4bd062a984f7657cfd725176e7aa1dd1706b2713e9369e02cc7ccd7e874333f9bb3381cba6c22d0d56121cf6e0992512ca40d6b63505f9b18aea937cbbee7492f3441665f51b446ab7e974eb472ad5d3d79d0be69deccd721037e065b69d7a3e945d0611f91128255161efcc91255fdd1a77fda70ab92766e7b13b91e14ab5de84f78037b5b538a279b1371d1b9ba2e4ea682ff35eb86cd6ec0aedc49158ca70a390429e41c1b63567f59e50458ab67496b906c649e6020a9f66ec4f1318dd562f910d305c86a75ca7523e1cf131a1bb060455a3c8831ee8b0fc7a86c01a4557d5e28d22d059ca3e"}]}, 0x2de) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @broadcast}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000340)=@mgmt_frame=@beacon={@with_ht={{{}, {0xaa}, @broadcast, @device_a, @initial, {0x7, 0x4c4}}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xffffffffffff921e, @default, 0x210, @val={0x0, 0x1c, @random="536f12dc4679344b1743c80090f9c329eca8517f5141443d2e020218"}, @void, @void, @val={0x4, 0x6, {0x2, 0xd6, 0x5, 0x800}}, @void, @val={0x5, 0xf6, {0x4, 0x14, 0x57, "e8304a244449b630c9ae9bb64bb608a41e4bf857338f3e56cbea66f2c27af6910b42e17f3ab1d64cd913e25e9072cd1f8f49ec469e275ee2537f27fca914553e4610f31bdc4cb4257c5506914f0129724087299a21e6b711a1682502175f728eaad11edb147455b1b9bc7a9051db0fb3ac5e83ed966f3a03a9affde16bc32c082d6f7cf50e078b84f280768bbce37382b0e49ebc65407fa353a1366e59c62d03c1856dd21d30b1c8ac1aa22f23be145ea60c6faaff875cdae5296bfa666c01182c2d341cf6a4fefff808e16fb0b03eda29e124a230757c4779edd7042f38fdbad0dded3ecc8393edb3bcfbe9f31d8b12406360"}}, @val={0x25, 0x3, {0x1, 0x0, 0x61}}, @void, @val={0x3c, 0x4, {0x1, 0x2f, 0xb1, 0x1}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x7f}}, @val={0x76, 0x6, {0x4, 0x5, 0x14, 0xff}}, [{0xdd, 0x88, "da1107e3188dd1ae5c45c30a4d9fde90702dd8b5ae7e8065ae9356db1d21ebba25e666cb2b0fbe601b53b001f525e1c0fff240f35ea441fa0142ba3b5c769f0c170bcb438b7092adb32596ca51fa18863d7dedcf7258519d5048ce56083050e33f816efe362402b316e0e5454008971b40a4c0144745e3ce483365f9ea0bc43b6d65dd61cfe635a3"}, {0xdd, 0xe8, "4bd062a984f7657cfd725176e7aa1dd1706b2713e9369e02cc7ccd7e874333f9bb3381cba6c22d0d56121cf6e0992512ca40d6b63505f9b18aea937cbbee7492f3441665f51b446ab7e974eb472ad5d3d79d0be69deccd721037e065b69d7a3e945d0611f91128255161efcc91255fdd1a77fda70ab92766e7b13b91e14ab5de84f78037b5b538a279b1371d1b9ba2e4ea682ff35eb86cd6ec0aedc49158ca70a390429e41c1b63567f59e50458ab67496b906c649e6020a9f66ec4f1318dd562f910d305c86a75ca7523e1cf131a1bb060455a3c8831ee8b0fc7a86c01a4557d5e28d22d059ca3e"}]}, 0x2de) (async) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @broadcast}, 0x10) (async) 08:53:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x6) [ 3042.079319][T11816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3042.086692][T11818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3042.099971][T11817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3042.113462][T11810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3042.125243][T11818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3042.157854][T11818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) [ 3042.204236][T11826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:59 executing program 1: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x20, 0x3}) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000) 08:53:59 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1900, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:59 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x28}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:59 executing program 1: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x20, 0x3}) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3042.473895][T11840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:59 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000340)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x4364}, @device_a, @device_b, @broadcast, {0xe, 0xd88}, @device_b}, {0xb, 0x1, 0x0, 0x0, 0xcd}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @from_mac=@broadcast, @from_mac=@device_b, {0x7}}, {0x1, 0x1, 0x1, 0x1, 0x20}}}, @random="4cfdd4cb3841ae7170e2ceefb7cc30661919e31322533b6ef0b7e6a03a9570f50bc4e9964310073cac5240891c1cde143999419e81cc48df84f20e38fec414b1b7950f0afeec278b08b176a3a7ae988e4012f08b5e363109487a955ee50226e7ba3ea746764751335128fa0ce222b040e64289b4a3378dbdb9c711431343bf00aac88fa829dd8a173eacf35be186b7f188d308e8ea5ac51cef91a1d84f57ca7c8f5901489660a9c7ea428db30b5fdcbde22a69a2e6aa6703d744ce9f44231cb215b12277f687ae3e9db22dae0e02154b45e4c7b2127cb594a48f7cef6c2597e8a6967d69bfe72bc571eacdac600a0a1c2efd613ef9ff2d0cddf7b7a481540075a480d2da3512f280903c3bf4352b337c5ad5f136b4fcc760b16cf1bbaeee008569e41b8e37add7ad4499e5dcdbf77ff43be2a637379abee1c3309002345f7732581a14d2bf6042b370c40d99dc6e09008d70a52a670e6c3dc8d20965b997c90a679a0ddedf1beb570e9eff4c4ae28db31b9b4815d402bc86583ea232018e2b5623cc577e1077cebb3a99fc65b435b7b6cef2104668bf47eb47579d2d5cb6c003982c30347a8db6f09f369a4ccfa604d8c84f28ebf27774b5d0c584f45d46f07b7d14afb980a7e9a9540012ba88623fc1716410c1b09b0c854aa6c06e3f3aa68d1bdb2024f1ed2041cc40c483233e01380b0f8f557710a3e0111185ede37642eeb4e1f23fbdfe4cf4376175c64ac4ff917c51d109d66858af4e9265d99b49f51d8c8e2012a6f4d36908d20125bc38670c90a2b416eae722ee9bd530886509f77fde77d6ccf08fdbe2a792dea497b740df6c3be85cd6f2769983b7a3a263153b56fd613bdd6c167fdd2096c1c031eafde3244aad30321a8adb0ff43f39e2bad7987804318c25dc3f69d898c7be4ee0a265ef656ad84b595753ae49d1fa29c8e76e4bddfd0f32904b4f9cbdfa44dcf544011588b88e6aab97ff6b35957f4ff58ebf166f959f3344abc6decad267170d86d7be07c853f10d64a271654325fe4762e989000c399e3bb24b323e02a1f4f72b2e6124c40a7fb60a10d36d1914dbeebb90920c5825b621d78e239fc5904dc03325191e84d8e9240224380600b9e9667715429fc9c79084a6f5627b4074dcb0943a025341338f5b8877f984c26e4a53210da30e0b73fd16ad93d9688191936f26267d40b6d0cc1d9cb9d95f3660f8972de5603f161d6fc97307d6beacd9cd9791962bef98f0d933763149125270af326f67c73fd9e5de09c8cf74f5d11a3061af137a1e3c6827e4be0299689afc1ec612fb7f03382a388e0cc718bce2ae6933c874dff108641d9fce1421a523b4dba6ffab9c226797aa5503a59d6a81df62dca8aa5b5f846aa1efca030481fcd3f54364aaa31585d9cbbfc99f3b6dcaf75bb5fe31dc9a4775f9e527f9a2cf6c5f57b5fac35b91583e9835a7a9476dbae8bbdfc783e0bbf84b9d2ad6a854a79322d73e3bb139c8d7047fd2cd56244ac1891c2928e87952607a639d0af19c22ea80ae833db01622"}, 0x47c) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000140)=ANY=[@ANYBLOB="98be5a00080211000001c614756f6a1f0802110000001b001308c88100005050505050500802110000007ae56aad57960700e1200200c6c1080211000000ffffffffffff5800ef16ef1b72d959fbed54bdb425055584b6ebfd8a8d33e00a6d8d8b753424ed7937f4ab09a5e3e514f55bd4972e7ddf3454712174f7ce4848b6c09669603019f03a01d43a4ba6a45c2b92a35c2b824608abf756ac0d4bbfce0000b8bd08e6ac4c8c2c1d32648384a1f6bea55e566507d65eda07707f73ce1811d48124f829aa373149ec86c778c1993c984722c2b41e244c013ee4ac9d7f044a370ea9163f00097b55c4"], 0xa0) [ 3042.515736][T11845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x10000000000000) [ 3042.589251][T11842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3042.618222][T11848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:59 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x545201, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x7) [ 3042.634150][T11848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3042.655218][T11848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:59 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x545201, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x545201, 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (async) 08:53:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1000000f193875) 08:53:59 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x545201, 0x0) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r0, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:59 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1a00, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:53:59 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x29}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:53:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b805000000b9ef0000000f01c166ba2100b81cef50e3efc4e29d8c91e8000000f20fd06e2e66baf80cb8d053678def66bafc0cedb9b7000040b802ec5593baa471b6730f300f011e66b89a000f00d0b9520800000f32650f01c9", 0x5a}], 0x1, 0x48, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000180)={0x0, 0x0, "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", "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"}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:53:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1000004a5f2807) [ 3042.917527][T11872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:59 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000340)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x4364}, @device_a, @device_b, @broadcast, {0xe, 0xd88}, @device_b}, {0xb, 0x1, 0x0, 0x0, 0xcd}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @from_mac=@broadcast, @from_mac=@device_b, {0x7}}, {0x1, 0x1, 0x1, 0x1, 0x20}}}, @random="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"}, 0x47c) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000140)=ANY=[@ANYBLOB="98be5a00080211000001c614756f6a1f0802110000001b001308c88100005050505050500802110000007ae56aad57960700e1200200c6c1080211000000ffffffffffff5800ef16ef1b72d959fbed54bdb425055584b6ebfd8a8d33e00a6d8d8b753424ed7937f4ab09a5e3e514f55bd4972e7ddf3454712174f7ce4848b6c09669603019f03a01d43a4ba6a45c2b92a35c2b824608abf756ac0d4bbfce0000b8bd08e6ac4c8c2c1d32648384a1f6bea55e566507d65eda07707f73ce1811d48124f829aa373149ec86c778c1993c984722c2b41e244c013ee4ac9d7f044a370ea9163f00097b55c4"], 0xa0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000340)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x4364}, @device_a, @device_b, @broadcast, {0xe, 0xd88}, @device_b}, {0xb, 0x1, 0x0, 0x0, 0xcd}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @from_mac=@broadcast, @from_mac=@device_b, {0x7}}, {0x1, 0x1, 0x1, 0x1, 0x20}}}, @random="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"}, 0x47c) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000140)=ANY=[@ANYBLOB="98be5a00080211000001c614756f6a1f0802110000001b001308c88100005050505050500802110000007ae56aad57960700e1200200c6c1080211000000ffffffffffff5800ef16ef1b72d959fbed54bdb425055584b6ebfd8a8d33e00a6d8d8b753424ed7937f4ab09a5e3e514f55bd4972e7ddf3454712174f7ce4848b6c09669603019f03a01d43a4ba6a45c2b92a35c2b824608abf756ac0d4bbfce0000b8bd08e6ac4c8c2c1d32648384a1f6bea55e566507d65eda07707f73ce1811d48124f829aa373149ec86c778c1993c984722c2b41e244c013ee4ac9d7f044a370ea9163f00097b55c4"], 0xa0) (async) [ 3042.980470][T11874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3043.035030][T11873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3043.049081][T11882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3043.075741][T11882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3043.087768][T11882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3043.102269][T11882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:53:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x1000007e9df807) [ 3043.119250][T11885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3043.138925][T11884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b805000000b9ef0000000f01c166ba2100b81cef50e3efc4e29d8c91e8000000f20fd06e2e66baf80cb8d053678def66bafc0cedb9b7000040b802ec5593baa471b6730f300f011e66b89a000f00d0b9520800000f32650f01c9", 0x5a}], 0x1, 0x48, &(0x7f0000000180), 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000180)={0x0, 0x0, "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", "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"}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) 08:54:00 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1b00, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3043.309089][T11891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x20000000000000) 08:54:00 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0x60}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:54:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0xf) [ 3043.450881][T11901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3043.463842][T11899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:00 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000340)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x4364}, @device_a, @device_b, @broadcast, {0xe, 0xd88}, @device_b}, {0xb, 0x1, 0x0, 0x0, 0xcd}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @from_mac=@broadcast, @from_mac=@device_b, {0x7}}, {0x1, 0x1, 0x1, 0x1, 0x20}}}, @random="4cfdd4cb3841ae7170e2ceefb7cc30661919e31322533b6ef0b7e6a03a9570f50bc4e9964310073cac5240891c1cde143999419e81cc48df84f20e38fec414b1b7950f0afeec278b08b176a3a7ae988e4012f08b5e363109487a955ee50226e7ba3ea746764751335128fa0ce222b040e64289b4a3378dbdb9c711431343bf00aac88fa829dd8a173eacf35be186b7f188d308e8ea5ac51cef91a1d84f57ca7c8f5901489660a9c7ea428db30b5fdcbde22a69a2e6aa6703d744ce9f44231cb215b12277f687ae3e9db22dae0e02154b45e4c7b2127cb594a48f7cef6c2597e8a6967d69bfe72bc571eacdac600a0a1c2efd613ef9ff2d0cddf7b7a481540075a480d2da3512f280903c3bf4352b337c5ad5f136b4fcc760b16cf1bbaeee008569e41b8e37add7ad4499e5dcdbf77ff43be2a637379abee1c3309002345f7732581a14d2bf6042b370c40d99dc6e09008d70a52a670e6c3dc8d20965b997c90a679a0ddedf1beb570e9eff4c4ae28db31b9b4815d402bc86583ea232018e2b5623cc577e1077cebb3a99fc65b435b7b6cef2104668bf47eb47579d2d5cb6c003982c30347a8db6f09f369a4ccfa604d8c84f28ebf27774b5d0c584f45d46f07b7d14afb980a7e9a9540012ba88623fc1716410c1b09b0c854aa6c06e3f3aa68d1bdb2024f1ed2041cc40c483233e01380b0f8f557710a3e0111185ede37642eeb4e1f23fbdfe4cf4376175c64ac4ff917c51d109d66858af4e9265d99b49f51d8c8e2012a6f4d36908d20125bc38670c90a2b416eae722ee9bd530886509f77fde77d6ccf08fdbe2a792dea497b740df6c3be85cd6f2769983b7a3a263153b56fd613bdd6c167fdd2096c1c031eafde3244aad30321a8adb0ff43f39e2bad7987804318c25dc3f69d898c7be4ee0a265ef656ad84b595753ae49d1fa29c8e76e4bddfd0f32904b4f9cbdfa44dcf544011588b88e6aab97ff6b35957f4ff58ebf166f959f3344abc6decad267170d86d7be07c853f10d64a271654325fe4762e989000c399e3bb24b323e02a1f4f72b2e6124c40a7fb60a10d36d1914dbeebb90920c5825b621d78e239fc5904dc03325191e84d8e9240224380600b9e9667715429fc9c79084a6f5627b4074dcb0943a025341338f5b8877f984c26e4a53210da30e0b73fd16ad93d9688191936f26267d40b6d0cc1d9cb9d95f3660f8972de5603f161d6fc97307d6beacd9cd9791962bef98f0d933763149125270af326f67c73fd9e5de09c8cf74f5d11a3061af137a1e3c6827e4be0299689afc1ec612fb7f03382a388e0cc718bce2ae6933c874dff108641d9fce1421a523b4dba6ffab9c226797aa5503a59d6a81df62dca8aa5b5f846aa1efca030481fcd3f54364aaa31585d9cbbfc99f3b6dcaf75bb5fe31dc9a4775f9e527f9a2cf6c5f57b5fac35b91583e9835a7a9476dbae8bbdfc783e0bbf84b9d2ad6a854a79322d73e3bb139c8d7047fd2cd56244ac1891c2928e87952607a639d0af19c22ea80ae833db01622"}, 0x47c) (async) syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000140)=ANY=[@ANYBLOB="98be5a00080211000001c614756f6a1f0802110000001b001308c88100005050505050500802110000007ae56aad57960700e1200200c6c1080211000000ffffffffffff5800ef16ef1b72d959fbed54bdb425055584b6ebfd8a8d33e00a6d8d8b753424ed7937f4ab09a5e3e514f55bd4972e7ddf3454712174f7ce4848b6c09669603019f03a01d43a4ba6a45c2b92a35c2b824608abf756ac0d4bbfce0000b8bd08e6ac4c8c2c1d32648384a1f6bea55e566507d65eda07707f73ce1811d48124f829aa373149ec86c778c1993c984722c2b41e244c013ee4ac9d7f044a370ea9163f00097b55c4"], 0xa0) 08:54:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b805000000b9ef0000000f01c166ba2100b81cef50e3efc4e29d8c91e8000000f20fd06e2e66baf80cb8d053678def66bafc0cedb9b7000040b802ec5593baa471b6730f300f011e66b89a000f00d0b9520800000f32650f01c9", 0x5a}], 0x1, 0x48, &(0x7f0000000180), 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000180)={0x0, 0x0, "cca10a874803f7487a193ba97861fd4ee9f0ff87b9f5873481b88da94a4a013b3504964663d816623a634cdebd8962423214280398404c67fe2a72b1c2735186468c0997bf403b003a9faae854653f9d3a1d80449f80c4bd689cb6008bf82a04d8da52c2b088f8a5cb62798f5eed2c04e6b4ae425ccb1fb004c27664ce498d82d64f0bba471e94bfc7876acebc035c5807251a420f491c525b160839df24da90ffe032b76deedff6184bb61d26a5817a069b8db06575a1cb6f22b0d524abb08b455ec443aed640518da29ea8b903e312147f5ed59e75519c022b79b93678461ec019887b2b68afe16e4d8c386845bcac69506baa39b8e3ec6d701a597936c05f", "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"}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b805000000b9ef0000000f01c166ba2100b81cef50e3efc4e29d8c91e8000000f20fd06e2e66baf80cb8d053678def66bafc0cedb9b7000040b802ec5593baa471b6730f300f011e66b89a000f00d0b9520800000f32650f01c9", 0x5a}], 0x1, 0x48, &(0x7f0000000180), 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000180)={0x0, 0x0, "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", "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"}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) (async) 08:54:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) [ 3043.565646][T11908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3043.593184][T11908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:00 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1c00, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3043.732480][T11924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:00 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) 08:54:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0xee0f0000000000) [ 3043.824635][T11926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3043.837553][T11925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x408180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000280)="362e67660fe5550066ba4100edf30fa6c0b9800000c00f3235002000000f30c4c2f91d3b64670f07b9510900000f3264660f388214de0f20e035400000000f22e00f381c5e7c", 0x46}], 0x1, 0x30, &(0x7f0000000300)=[@dstype0={0x6, 0x7}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x204}) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x34, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x4, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 08:54:00 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @random="24f6495399b2", @device_a, @broadcast, {0x0, 0x7f}}, {0xe, 0x1, 0x3, 0x0, 0x1f}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x11b6}, @from_mac=@device_b, @device_b, @initial, {0xf, 0x6}}, {0xe, 0x0, 0x2, 0x1, 0xe1}}}, @random="d5da2cf7e92bc170c2d1d1e3d468dd1f3975581ba45c2f1a5d6aefa4253bfc77f88c486997d13c4adb1a0810e89b0d6c4900f9da712dbdda3ddab075f7b7fdb671667f909a6d249604c6b98262ca23e20e15ee53da7994d1cc263611a64a4e5fce4121b64a95bb9fc5cbd805cae24505bf4d85cfd890b5fe4f2b942bdd553bb5b56d0ba8a8f1cdc501fd5415880d"}, 0xc2) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3f}, @device_a, @broadcast, @random="b6033b173ec7", {0x8, 0x9}}, @ver_80211n={0x0, 0xbad, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x41, @void}, 0x1e) [ 3043.966274][T11931] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3043.990130][T11931] tipc: Invalid UDP bearer configuration [ 3043.990175][T11931] tipc: Enabling of bearer rejected, failed to enable media 08:54:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 08:54:00 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1d00, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) [ 3044.015085][T11934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.052632][T11934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x10) [ 3044.092351][T11934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x408180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) (async) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000280)="362e67660fe5550066ba4100edf30fa6c0b9800000c00f3235002000000f30c4c2f91d3b64670f07b9510900000f3264660f388214de0f20e035400000000f22e00f381c5e7c", 0x46}], 0x1, 0x30, &(0x7f0000000300)=[@dstype0={0x6, 0x7}], 0x1) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x0) (rerun: 64) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x204}) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x34, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x4, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 08:54:00 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x31) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3044.148251][T11939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) [ 3044.203339][T11950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.216095][T11948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.268681][T11942] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO 08:54:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x200020000000000) [ 3044.324397][T11942] tipc: Invalid UDP bearer configuration [ 3044.324435][T11942] tipc: Enabling of bearer rejected, failed to enable media 08:54:01 executing program 5: syz_80211_inject_frame(&(0x7f0000000300)=@device_b={0x8, 0x2, 0x11, 0x4c}, 0x0, 0x0) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @random="24f6495399b2", @device_a, @broadcast, {0x0, 0x7f}}, {0xe, 0x1, 0x3, 0x0, 0x1f}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x11b6}, @from_mac=@device_b, @device_b, @initial, {0xf, 0x6}}, {0xe, 0x0, 0x2, 0x1, 0xe1}}}, @random="d5da2cf7e92bc170c2d1d1e3d468dd1f3975581ba45c2f1a5d6aefa4253bfc77f88c486997d13c4adb1a0810e89b0d6c4900f9da712dbdda3ddab075f7b7fdb671667f909a6d249604c6b98262ca23e20e15ee53da7994d1cc263611a64a4e5fce4121b64a95bb9fc5cbd805cae24505bf4d85cfd890b5fe4f2b942bdd553bb5b56d0ba8a8f1cdc501fd5415880d"}, 0xc2) (async, rerun: 64) syz_80211_inject_frame(&(0x7f0000000140)=@broadcast, &(0x7f0000000180)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3f}, @device_a, @broadcast, @random="b6033b173ec7", {0x8, 0x9}}, @ver_80211n={0x0, 0xbad, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x41, @void}, 0x1e) 08:54:01 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1e00, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:54:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 08:54:01 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x25) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3044.519635][T11963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x408180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x1]}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000280)="362e67660fe5550066ba4100edf30fa6c0b9800000c00f3235002000000f30c4c2f91d3b64670f07b9510900000f3264660f388214de0f20e035400000000f22e00f381c5e7c", 0x46}], 0x1, 0x30, &(0x7f0000000300)=[@dstype0={0x6, 0x7}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async, rerun: 64) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x204}) (async) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000080)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x34, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x4, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async, rerun: 64) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000000)) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) [ 3044.590829][T11965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.659657][T11964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.687525][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.713157][T11975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.717820][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.726006][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.743296][T11970] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3044.773947][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.788741][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.801049][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.812706][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) [ 3044.827314][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.848952][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.869312][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.873562][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.899248][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.934596][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.972201][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:01 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0xc0) syz_80211_inject_frame(0x0, 0x0, 0x0) [ 3044.985562][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3044.997585][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.009937][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.021617][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.050337][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.052171][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.087571][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x149802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x300) 08:54:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) 08:54:01 executing program 3: syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1f00, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x2e) 08:54:01 executing program 1: r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "34326777242f7a6f9fe5755c515962c1cbc602d8e576df26d70349fb44f711a5823ec1acca4a777622e1c60358a958acfd2b6df37522ceabe7759ddb507e23c7"}, 0x48, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$link(0x8, r0, r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$clear(0x7, r4) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) [ 3045.116387][T11984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.130315][T11983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.142148][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.170972][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.182586][T11988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.186854][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.224335][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.241460][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.248650][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.265184][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.277843][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 08:54:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x600000000000000) [ 3045.321310][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.348929][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.350269][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.368683][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.388828][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.436468][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3045.504389][T11962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3046.372009][ T6671] device hsr_slave_0 left promiscuous mode [ 3046.380928][ T6671] device hsr_slave_1 left promiscuous mode [ 3046.388209][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3046.398785][ T6671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3046.407992][ T6671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3046.415724][ T6671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3046.425037][ T6671] device bridge_slave_1 left promiscuous mode [ 3046.431356][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state [ 3046.441079][ T6671] device bridge_slave_0 left promiscuous mode [ 3046.447458][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state [ 3046.469614][ T6671] device veth1_macvtap left promiscuous mode [ 3046.475952][ T6671] device veth0_macvtap left promiscuous mode [ 3046.482010][ T6671] device veth1_vlan left promiscuous mode [ 3046.487979][ T6671] device veth0_vlan left promiscuous mode [ 3046.671590][ T6671] team0 (unregistering): Port device team_slave_1 removed [ 3046.691707][ T6671] team0 (unregistering): Port device team_slave_0 removed [ 3046.705319][ T6671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3046.720736][ T6671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3046.792303][ T6671] bond0 (unregistering): Released all slaves [ 3050.293039][ T1213] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 3052.707772][ T1213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3052.716891][ T1213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3052.724827][ T1213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3052.733241][ T1213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3052.740740][ T1213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3052.748056][ T1213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3052.838640][T12005] chnl_net:caif_netlink_parms(): no params data found [ 3052.881547][T12005] bridge0: port 1(bridge_slave_0) entered blocking state [ 3052.889062][T12005] bridge0: port 1(bridge_slave_0) entered disabled state [ 3052.900794][T12005] device bridge_slave_0 entered promiscuous mode [ 3052.909932][T12005] bridge0: port 2(bridge_slave_1) entered blocking state [ 3052.917491][T12005] bridge0: port 2(bridge_slave_1) entered disabled state [ 3052.929372][T12005] device bridge_slave_1 entered promiscuous mode [ 3052.933062][T12003] Bluetooth: hci3: command 0x0406 tx timeout [ 3052.954733][T12005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3052.965640][T12005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3052.991352][T12005] team0: Port device team_slave_0 added [ 3052.999382][T12005] team0: Port device team_slave_1 added [ 3053.022552][T12005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3053.029566][T12005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3053.055942][T12005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3053.067965][T12005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3053.075280][T12005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3053.101759][T12005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3053.132152][T12005] device hsr_slave_0 entered promiscuous mode [ 3053.138739][T12005] device hsr_slave_1 entered promiscuous mode [ 3053.145563][T12005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3053.153226][T12005] Cannot create hsr debugfs directory [ 3053.221395][T12005] bridge0: port 2(bridge_slave_1) entered blocking state [ 3053.228485][T12005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3053.235884][T12005] bridge0: port 1(bridge_slave_0) entered blocking state [ 3053.243040][T12005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3053.287357][T12005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3053.300468][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3053.309593][T30730] bridge0: port 1(bridge_slave_0) entered disabled state [ 3053.317905][T30730] bridge0: port 2(bridge_slave_1) entered disabled state [ 3053.326097][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3053.341146][T12005] 8021q: adding VLAN 0 to HW filter on device team0 [ 3053.356195][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3053.365779][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 3053.372892][ T9186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3053.395571][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3053.404502][T30730] bridge0: port 2(bridge_slave_1) entered blocking state [ 3053.411548][T30730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3053.421012][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3053.430027][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3053.446161][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3053.454559][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3053.472066][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3053.483320][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3053.505365][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3053.513678][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3053.525136][T12005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3053.542674][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3053.564389][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3053.573037][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3053.580697][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3053.594527][T12005] device veth0_vlan entered promiscuous mode [ 3053.606420][T12005] device veth1_vlan entered promiscuous mode [ 3053.628846][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3053.637793][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3053.646455][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3053.657650][T12005] device veth0_macvtap entered promiscuous mode [ 3053.667379][T12005] device veth1_macvtap entered promiscuous mode [ 3053.681428][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3053.694405][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.705402][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3053.716468][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.726556][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3053.739461][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.750078][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3053.760736][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.770698][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3053.781362][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.795414][T12005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3053.804507][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3053.816231][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3053.829177][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3053.839823][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.851216][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3053.861698][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.871544][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3053.882032][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.891966][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3053.902700][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.914056][T12005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3053.926621][T12005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.937763][T12005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3053.948098][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3053.956986][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3054.027871][T11381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3054.055013][T11381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3054.060167][T18320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3054.068288][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3054.071435][T18320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3054.089650][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3054.127922][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.140034][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.141480][T12013] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.150732][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.173364][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.184781][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.196132][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.207113][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.207959][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.230190][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.231301][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.241022][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.261534][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.262464][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.286477][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.299406][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.301143][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.310773][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.331760][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.337697][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.343458][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.352332][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.369604][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.374664][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.390012][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.391412][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.411593][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.426654][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.438219][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.438253][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.449394][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.467270][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.470911][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.489016][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.490110][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.500484][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.517862][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.521999][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.541962][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.551943][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.553343][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.568967][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.582732][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.590649][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.594269][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.615563][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.616783][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.626796][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.645216][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.649942][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.664866][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.666924][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.676736][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.696916][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.708431][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.709788][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.728284][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.729485][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.740086][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.758221][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.760200][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.773446][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.790256][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.801900][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.802366][T12011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.820988][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.836725][T12012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3054.854350][T13117] Bluetooth: hci1: command 0x0409 tx timeout [ 3055.583933][T18319] device hsr_slave_0 left promiscuous mode [ 3055.590128][T18319] device hsr_slave_1 left promiscuous mode [ 3055.597417][T18319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3055.605946][T18319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3055.616224][T18319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3055.623741][T18319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3055.632263][T18319] device bridge_slave_1 left promiscuous mode [ 3055.638552][T18319] bridge0: port 2(bridge_slave_1) entered disabled state [ 3055.647110][T18319] device bridge_slave_0 left promiscuous mode [ 3055.654605][T18319] bridge0: port 1(bridge_slave_0) entered disabled state [ 3055.668447][T18319] device veth1_macvtap left promiscuous mode [ 3055.674500][T18319] device veth0_macvtap left promiscuous mode [ 3055.680542][T18319] device veth1_vlan left promiscuous mode [ 3055.686515][T18319] device veth0_vlan left promiscuous mode [ 3055.875132][T18319] team0 (unregistering): Port device team_slave_1 removed [ 3055.892381][T18319] team0 (unregistering): Port device team_slave_0 removed [ 3055.911223][T18319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3055.925527][T18319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3055.999589][T18319] bond0 (unregistering): Released all slaves [ 3057.418646][ T9299] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3057.428418][ T9299] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3057.436654][ T9299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3057.444847][ T9299] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3057.452560][ T9299] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3057.459932][ T9299] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3057.550449][T12016] chnl_net:caif_netlink_parms(): no params data found [ 3057.595255][T12016] bridge0: port 1(bridge_slave_0) entered blocking state [ 3057.603243][T12016] bridge0: port 1(bridge_slave_0) entered disabled state [ 3057.611104][T12016] device bridge_slave_0 entered promiscuous mode [ 3057.620073][T12016] bridge0: port 2(bridge_slave_1) entered blocking state [ 3057.627618][T12016] bridge0: port 2(bridge_slave_1) entered disabled state [ 3057.635526][T12016] device bridge_slave_1 entered promiscuous mode [ 3057.660429][T12016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3057.672096][T12016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3057.698121][T12016] team0: Port device team_slave_0 added [ 3057.709934][T12016] team0: Port device team_slave_1 added [ 3057.728344][T12016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3057.736993][T12016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3057.763171][T12016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3057.775928][T12016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3057.783040][T12016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3057.809537][T12016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3057.840190][T12016] device hsr_slave_0 entered promiscuous mode [ 3057.846944][T12016] device hsr_slave_1 entered promiscuous mode [ 3057.854777][T12016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3057.862333][T12016] Cannot create hsr debugfs directory [ 3057.942131][T12016] bridge0: port 2(bridge_slave_1) entered blocking state [ 3057.949223][T12016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3057.956539][T12016] bridge0: port 1(bridge_slave_0) entered blocking state [ 3057.963629][T12016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3058.013709][T12016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3058.030019][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3058.039120][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 3058.047160][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 3058.056347][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3058.071256][T12016] 8021q: adding VLAN 0 to HW filter on device team0 [ 3058.082229][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3058.090949][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 3058.098073][ T4193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3058.114309][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3058.122641][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 3058.129743][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3058.151959][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3058.162710][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3058.181763][T12016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3058.192351][T12016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3058.210641][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3058.220018][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3058.228664][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3058.239747][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3058.251556][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3058.259558][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3058.270977][T12016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3058.293443][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3058.309552][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3058.322576][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3058.330612][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3058.347756][T12016] device veth0_vlan entered promiscuous mode [ 3058.358628][T12016] device veth1_vlan entered promiscuous mode [ 3058.381718][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3058.390154][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3058.399810][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3058.410668][T12016] device veth0_macvtap entered promiscuous mode [ 3058.421773][T12016] device veth1_macvtap entered promiscuous mode [ 3058.441357][T12016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3058.455253][T12016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3058.465487][T12016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3058.476138][T12016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3058.486270][T12016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3058.496872][T12016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3058.506899][T12016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3058.517557][T12016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3058.528202][T12016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3058.540193][T12016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3058.551756][T12016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3058.560799][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3058.571917][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3058.582223][T12016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3058.593195][T12016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3058.603485][T12016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3058.614361][T12016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3058.625082][T12016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3058.636085][T12016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3058.646025][T12016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3058.656924][T12016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3058.666864][T12016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3058.678170][T12016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3058.689553][T12016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3058.699168][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3058.708862][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3058.779078][T11381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3058.801304][T11381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3058.818611][T30678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3058.823913][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3058.827898][T30678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3058.847318][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3058.888174][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3058.889441][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3058.901424][T12024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3058.910445][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3058.929819][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3058.931463][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3058.941096][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3058.964316][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3058.975313][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3058.982314][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3058.987312][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.006646][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.017730][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.020339][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.036902][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.039875][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.052488][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.058360][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.075291][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.079310][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.097238][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.098921][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.115553][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.119124][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.143536][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.154817][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.155357][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.171548][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.175990][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.197391][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.200850][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.211911][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.218550][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.235281][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.239324][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.260902][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.262011][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.282349][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.289419][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.293864][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.312605][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.314719][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.330866][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.333774][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.354503][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.355171][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.367404][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.385690][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.386200][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.397184][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.419089][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.430757][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.444709][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.452363][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.455831][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.472816][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.478060][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.493615][ T9185] Bluetooth: hci1: command 0x0409 tx timeout [ 3059.496309][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.511297][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.512088][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.530778][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.532674][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.542287][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.552240][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.571841][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.583109][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.585023][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.602616][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.603862][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.623001][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.624811][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.641268][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.644242][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.666537][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.682993][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.695141][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.705952][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.718687][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.730130][T12023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3059.743697][T12022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3060.528214][T11381] device hsr_slave_0 left promiscuous mode [ 3060.535072][T11381] device hsr_slave_1 left promiscuous mode [ 3060.541316][T11381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3060.548825][T11381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3060.557673][T11381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3060.566665][T11381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3060.576161][T11381] device bridge_slave_1 left promiscuous mode [ 3060.582322][T11381] bridge0: port 2(bridge_slave_1) entered disabled state [ 3060.591126][T11381] device bridge_slave_0 left promiscuous mode [ 3060.597470][T11381] bridge0: port 1(bridge_slave_0) entered disabled state [ 3060.609272][T11381] device veth1_macvtap left promiscuous mode [ 3060.618710][T11381] device veth0_macvtap left promiscuous mode [ 3060.624932][T11381] device veth1_vlan left promiscuous mode [ 3060.630702][T11381] device veth0_vlan left promiscuous mode [ 3060.816868][T11381] team0 (unregistering): Port device team_slave_1 removed [ 3060.830748][T11381] team0 (unregistering): Port device team_slave_0 removed [ 3060.845315][T11381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3060.862662][T11381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3060.932445][T11381] bond0 (unregistering): Released all slaves [ 3062.303118][ T1213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3062.313249][ T1213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3062.320936][ T1213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3062.329365][ T1213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3062.336875][ T1213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3062.344170][ T1213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3062.435899][T12027] chnl_net:caif_netlink_parms(): no params data found [ 3062.480055][T12027] bridge0: port 1(bridge_slave_0) entered blocking state [ 3062.487285][T12027] bridge0: port 1(bridge_slave_0) entered disabled state [ 3062.495933][T12027] device bridge_slave_0 entered promiscuous mode [ 3062.504468][T12027] bridge0: port 2(bridge_slave_1) entered blocking state [ 3062.511704][T12027] bridge0: port 2(bridge_slave_1) entered disabled state [ 3062.520413][T12027] device bridge_slave_1 entered promiscuous mode [ 3062.550935][T12027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3062.561671][T12027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3062.589426][T12027] team0: Port device team_slave_0 added [ 3062.600064][T12027] team0: Port device team_slave_1 added [ 3062.619905][T12027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3062.627013][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3062.652956][T12027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3062.666731][T12027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3062.673754][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3062.699670][T12027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3062.732412][T12027] device hsr_slave_0 entered promiscuous mode [ 3062.739138][T12027] device hsr_slave_1 entered promiscuous mode [ 3062.745846][T12027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3062.753563][T12027] Cannot create hsr debugfs directory [ 3062.822187][T12027] bridge0: port 2(bridge_slave_1) entered blocking state [ 3062.829293][T12027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3062.836670][T12027] bridge0: port 1(bridge_slave_0) entered blocking state [ 3062.843770][T12027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3062.889984][T12027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3062.902935][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3062.911199][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 3062.919215][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 3062.933703][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3062.948406][T12027] 8021q: adding VLAN 0 to HW filter on device team0 [ 3062.959124][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3062.968086][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 3062.975204][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3062.994593][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3063.003385][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 3063.010470][T12003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3063.024064][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3063.036964][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3063.048277][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3063.061438][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3063.074134][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3063.085088][T12027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3063.115104][T12027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3063.122723][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3063.131029][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3063.149450][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3063.173402][T12027] device veth0_vlan entered promiscuous mode [ 3063.180482][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3063.189357][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3063.197653][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3063.209582][T12027] device veth1_vlan entered promiscuous mode [ 3063.217570][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3063.241664][T12027] device veth0_macvtap entered promiscuous mode [ 3063.250413][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3063.260474][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3063.269268][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3063.279220][T12027] device veth1_macvtap entered promiscuous mode [ 3063.296319][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3063.307122][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3063.317337][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3063.332233][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3063.343308][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3063.354136][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3063.366619][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3063.377434][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3063.387863][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3063.398849][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3063.411033][T12027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3063.419479][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3063.432146][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3063.443786][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3063.455186][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3063.469297][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3063.480248][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3063.492977][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3063.503194][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3063.513743][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3063.523799][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3063.534544][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3063.547675][T12027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3063.556780][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3063.565951][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3063.638306][T11381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3063.646977][T11381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3063.667869][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3063.685785][T18319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3063.695531][T18319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3063.708012][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3063.748577][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.749736][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.759196][T12035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.779110][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.779524][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.798349][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.808586][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.812172][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.824169][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.840194][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.841349][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.859975][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.863117][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.880153][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.881566][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.902599][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.905340][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.914255][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.931621][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.936246][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.953941][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.955156][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.964917][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.986989][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.988769][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3063.998334][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.018452][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.030795][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.050481][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.060256][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.061392][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.074510][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.088429][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.091001][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.108524][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.111275][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.128410][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.130791][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.160988][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.165324][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.182244][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.184657][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.193703][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.210238][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.212552][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.232312][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.235008][T12033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.251645][T12034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3064.374193][T12003] Bluetooth: hci1: command 0x0409 tx timeout [ 3064.930190][T30678] device hsr_slave_0 left promiscuous mode [ 3064.941391][T30678] device hsr_slave_1 left promiscuous mode [ 3064.948717][T30678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3064.956959][T30678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3064.965642][T30678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3064.976246][T30678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3064.985034][T30678] device bridge_slave_1 left promiscuous mode [ 3064.991200][T30678] bridge0: port 2(bridge_slave_1) entered disabled state [ 3065.000205][T30678] device bridge_slave_0 left promiscuous mode [ 3065.006822][T30678] bridge0: port 1(bridge_slave_0) entered disabled state [ 3065.020686][T30678] device veth1_macvtap left promiscuous mode [ 3065.026900][T30678] device veth0_macvtap left promiscuous mode [ 3065.033082][T30678] device veth1_vlan left promiscuous mode [ 3065.038864][T30678] device veth0_vlan left promiscuous mode [ 3065.222183][T30678] team0 (unregistering): Port device team_slave_1 removed [ 3065.236630][T30678] team0 (unregistering): Port device team_slave_0 removed [ 3065.252115][T30678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3065.271488][T30678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3065.341196][T30678] bond0 (unregistering): Released all slaves [ 3066.941392][ T3636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3066.950773][ T3636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3066.960597][ T3636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3066.968196][ T3636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3066.975957][ T3636] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3066.983456][ T3636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3067.073043][T12038] chnl_net:caif_netlink_parms(): no params data found [ 3067.116755][T12038] bridge0: port 1(bridge_slave_0) entered blocking state [ 3067.125633][T12038] bridge0: port 1(bridge_slave_0) entered disabled state [ 3067.134075][T12038] device bridge_slave_0 entered promiscuous mode [ 3067.142493][T12038] bridge0: port 2(bridge_slave_1) entered blocking state [ 3067.149781][T12038] bridge0: port 2(bridge_slave_1) entered disabled state [ 3067.161002][T12038] device bridge_slave_1 entered promiscuous mode [ 3067.185750][T12038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3067.197884][T12038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3067.225233][T12038] team0: Port device team_slave_0 added [ 3067.234591][T12038] team0: Port device team_slave_1 added [ 3067.259507][T12038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3067.266701][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3067.293013][T12038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3067.304941][T12038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3067.311877][T12038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3067.338730][T12038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3067.370660][T12038] device hsr_slave_0 entered promiscuous mode [ 3067.378060][T12038] device hsr_slave_1 entered promiscuous mode [ 3067.385242][T12038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3067.392926][T12038] Cannot create hsr debugfs directory [ 3067.467090][T12038] bridge0: port 2(bridge_slave_1) entered blocking state [ 3067.474221][T12038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3067.481523][T12038] bridge0: port 1(bridge_slave_0) entered blocking state [ 3067.488643][T12038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3067.540097][T12038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3067.552469][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3067.561890][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 3067.569955][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 3067.579976][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3067.594682][T12038] 8021q: adding VLAN 0 to HW filter on device team0 [ 3067.606344][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3067.615476][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 3067.622540][ T9186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3067.644358][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3067.652802][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state [ 3067.659878][ T9186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3067.668785][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3067.679655][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3067.693371][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3067.706425][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3067.721301][T12038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3067.732718][T12038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3067.743969][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3067.763931][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3067.771371][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3067.780967][T12038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3067.804131][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3067.825141][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3067.834673][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3067.843241][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3067.852097][T12038] device veth0_vlan entered promiscuous mode [ 3067.864685][T12038] device veth1_vlan entered promiscuous mode [ 3067.885898][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3067.894407][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3067.902475][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3067.914159][T12038] device veth0_macvtap entered promiscuous mode [ 3067.926647][T12038] device veth1_macvtap entered promiscuous mode [ 3067.942630][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3067.953540][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.963670][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3067.978356][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3067.988520][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3068.003669][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.013664][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3068.026710][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.037591][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3068.048732][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.061271][T12038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3068.071532][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3068.081265][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3068.091962][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.103072][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.113247][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.128584][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.140004][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.151587][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.163130][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.173866][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.183744][T12038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3068.194227][T12038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3068.205218][T12038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3068.214745][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3068.224132][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3068.303371][T18320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3068.311596][T18320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3068.323344][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3068.344525][T11381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3068.354701][T11381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3068.367678][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3068.407592][T12046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.413624][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.417544][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.436213][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.448785][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.456456][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.461673][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.479702][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.481692][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.498905][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.501862][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.517901][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.520713][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.540996][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.549933][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.552292][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.572947][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.580716][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.586085][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.594749][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.605502][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.625925][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.633716][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.637276][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.646560][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.657064][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.675659][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.677549][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.699147][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.710605][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.722451][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.723549][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3068.745634][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3069.471438][T18320] device hsr_slave_0 left promiscuous mode [ 3069.478544][T18320] device hsr_slave_1 left promiscuous mode [ 3069.485136][T18320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3069.492602][T18320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3069.502167][T18320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3069.511328][T18320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3069.520625][T18320] device bridge_slave_1 left promiscuous mode [ 3069.527046][T18320] bridge0: port 2(bridge_slave_1) entered disabled state [ 3069.535593][T18320] device bridge_slave_0 left promiscuous mode [ 3069.541741][T18320] bridge0: port 1(bridge_slave_0) entered disabled state [ 3069.556118][T18320] device veth1_macvtap left promiscuous mode [ 3069.562141][T18320] device veth0_macvtap left promiscuous mode [ 3069.568561][T18320] device veth1_vlan left promiscuous mode [ 3069.574893][T18320] device veth0_vlan left promiscuous mode [ 3069.757960][T18320] team0 (unregistering): Port device team_slave_1 removed [ 3069.771648][T18320] team0 (unregistering): Port device team_slave_0 removed [ 3069.787863][T18320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3069.801846][T18320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3069.880706][T18320] bond0 (unregistering): Released all slaves [ 3073.493106][ T3636] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 3075.905412][ T1213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3075.916073][ T1213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3075.924419][ T1213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3075.932989][ T1213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3075.940756][ T1213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3075.948163][ T1213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3076.034398][T12050] chnl_net:caif_netlink_parms(): no params data found [ 3076.078709][T12050] bridge0: port 1(bridge_slave_0) entered blocking state [ 3076.086808][T12050] bridge0: port 1(bridge_slave_0) entered disabled state [ 3076.095513][T12050] device bridge_slave_0 entered promiscuous mode [ 3076.103919][T12050] bridge0: port 2(bridge_slave_1) entered blocking state [ 3076.111041][T12050] bridge0: port 2(bridge_slave_1) entered disabled state [ 3076.118972][T12050] device bridge_slave_1 entered promiscuous mode [ 3076.144266][T12050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3076.155594][T12050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3076.180999][T12050] team0: Port device team_slave_0 added [ 3076.188150][T12050] team0: Port device team_slave_1 added [ 3076.209683][T12050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3076.216722][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3076.245346][T12050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3076.257323][T12050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3076.264457][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3076.290382][T12050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3076.319567][T12050] device hsr_slave_0 entered promiscuous mode [ 3076.326248][T12050] device hsr_slave_1 entered promiscuous mode [ 3076.332717][T12050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3076.341223][T12050] Cannot create hsr debugfs directory [ 3076.409280][T12050] bridge0: port 2(bridge_slave_1) entered blocking state [ 3076.416412][T12050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3076.423827][T12050] bridge0: port 1(bridge_slave_0) entered blocking state [ 3076.430935][T12050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3076.484738][T12050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3076.499049][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3076.507885][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 3076.516170][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 3076.525158][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3076.539852][T12050] 8021q: adding VLAN 0 to HW filter on device team0 [ 3076.553985][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3076.562357][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 3076.569733][ T9185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3076.583069][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3076.591381][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 3076.598485][T12003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3076.622088][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3076.636685][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3076.650287][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3076.664012][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3076.677713][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3076.688938][T12050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3076.709993][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3076.721631][T30730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3076.733624][T12050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3076.757179][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3076.772605][T12050] device veth0_vlan entered promiscuous mode [ 3076.780235][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3076.794893][T12050] device veth1_vlan entered promiscuous mode [ 3076.809022][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3076.817375][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3076.825572][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3076.833475][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3076.851980][T12050] device veth0_macvtap entered promiscuous mode [ 3076.862607][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3076.871477][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3076.881532][T12050] device veth1_macvtap entered promiscuous mode [ 3076.901878][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3076.912480][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3076.923604][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3076.934890][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3076.945272][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3076.956599][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3076.966611][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3076.977251][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3076.987089][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3076.997967][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3077.011738][T12050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3077.025992][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3077.039030][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3077.049810][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3077.060577][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3077.071302][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3077.081327][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3077.091930][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3077.102173][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3077.115398][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3077.125361][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3077.142326][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3077.154209][T12050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3077.163355][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3077.171867][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3077.237835][T18319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3077.254355][T18319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3077.274592][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3077.283712][T11381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3077.291842][T11381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3077.302651][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3077.337402][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.341311][T12058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.351760][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.370402][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.375615][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.381739][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.391506][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.408666][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.410711][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.431858][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.432538][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.449196][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.452642][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.474429][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.486208][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.492456][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.497433][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.517611][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.522578][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.529314][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.546523][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.548884][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.565435][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.568651][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.590211][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.592316][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.601527][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.621325][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.627729][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.633195][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.649758][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.651568][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.661790][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.674591][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.696479][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.704077][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.707597][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.717054][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.727911][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.752465][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.753103][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.763793][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.781388][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.784862][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.800256][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.805304][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.815682][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.830358][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.833942][T12056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.852485][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.874848][T12058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3077.973364][ T9185] Bluetooth: hci1: command 0x0409 tx timeout [ 3078.580659][ T4570] device hsr_slave_0 left promiscuous mode [ 3078.592368][ T4570] device hsr_slave_1 left promiscuous mode [ 3078.599581][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3078.608451][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3078.618155][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3078.625971][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3078.636541][ T4570] device bridge_slave_1 left promiscuous mode [ 3078.642704][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 3078.651254][ T4570] device bridge_slave_0 left promiscuous mode [ 3078.661515][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 3078.672570][ T4570] device veth1_macvtap left promiscuous mode [ 3078.678764][ T4570] device veth0_macvtap left promiscuous mode [ 3078.685610][ T4570] device veth1_vlan left promiscuous mode [ 3078.691454][ T4570] device veth0_vlan left promiscuous mode [ 3078.874333][ T4570] team0 (unregistering): Port device team_slave_1 removed [ 3078.893598][ T4570] team0 (unregistering): Port device team_slave_0 removed [ 3078.909063][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3078.924104][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3078.991732][ T4570] bond0 (unregistering): Released all slaves [ 3081.574647][ T1226] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.580918][ T1226] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.543054][ T1213] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 3084.943044][ T3636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3084.954234][ T3636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3084.962282][ T3636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3084.970993][ T3636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3084.978569][ T3636] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3084.985999][ T3636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3085.074179][T12063] chnl_net:caif_netlink_parms(): no params data found [ 3085.114653][T12063] bridge0: port 1(bridge_slave_0) entered blocking state [ 3085.121794][T12063] bridge0: port 1(bridge_slave_0) entered disabled state [ 3085.129728][T12063] device bridge_slave_0 entered promiscuous mode [ 3085.138489][T12063] bridge0: port 2(bridge_slave_1) entered blocking state [ 3085.146104][T12063] bridge0: port 2(bridge_slave_1) entered disabled state [ 3085.156715][T12063] device bridge_slave_1 entered promiscuous mode [ 3085.179430][T12063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3085.191249][T12063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3085.215746][T12063] team0: Port device team_slave_0 added [ 3085.224394][T12063] team0: Port device team_slave_1 added [ 3085.242896][T12063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3085.250331][T12063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3085.278830][T12063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3085.291161][T12063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3085.298234][T12063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3085.324153][T12063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3085.352485][T12063] device hsr_slave_0 entered promiscuous mode [ 3085.359154][T12063] device hsr_slave_1 entered promiscuous mode [ 3085.365825][T12063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3085.373614][T12063] Cannot create hsr debugfs directory [ 3085.446250][T12063] bridge0: port 2(bridge_slave_1) entered blocking state [ 3085.453368][T12063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3085.460656][T12063] bridge0: port 1(bridge_slave_0) entered blocking state [ 3085.467769][T12063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3085.517962][T12063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3085.530801][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3085.539380][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 3085.548407][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 3085.557855][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3085.571524][T12063] 8021q: adding VLAN 0 to HW filter on device team0 [ 3085.584979][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3085.593463][ T9263] bridge0: port 1(bridge_slave_0) entered blocking state [ 3085.600501][ T9263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3085.616665][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3085.625259][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 3085.632303][T12003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3085.655264][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3085.664464][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3085.673627][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3085.683689][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3085.698123][T12063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3085.709134][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3085.719363][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3085.739193][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3085.746730][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3085.759023][T12063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3085.776867][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3085.797226][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3085.807540][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3085.815880][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3085.826245][T12063] device veth0_vlan entered promiscuous mode [ 3085.838614][T12063] device veth1_vlan entered promiscuous mode [ 3085.862524][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3085.870989][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3085.879605][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3085.891157][T12063] device veth0_macvtap entered promiscuous mode [ 3085.901206][T12063] device veth1_macvtap entered promiscuous mode [ 3085.916408][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3085.927930][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3085.938570][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3085.949328][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3085.960783][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3085.971875][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3085.991309][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3086.001822][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3086.011759][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3086.022344][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3086.034837][T12063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3086.043784][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3086.053390][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3086.067878][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3086.082209][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3086.092065][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3086.102569][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3086.112416][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3086.122879][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3086.132683][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3086.143615][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3086.153707][T12063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3086.164203][T12063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3086.176138][T12063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3086.187189][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3086.196350][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3086.275915][T18320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3086.291548][T18320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3086.294520][ T4570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3086.307275][ T3678] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3086.315812][ T4570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3086.327440][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3086.361663][T12069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3086.362435][T12070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3087.040899][ T6669] device hsr_slave_0 left promiscuous mode [ 3087.047628][ T6669] device hsr_slave_1 left promiscuous mode [ 3087.058407][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3087.066226][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3087.076195][ T6669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3087.083872][ T6669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3087.094155][ T6669] device bridge_slave_1 left promiscuous mode [ 3087.100594][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 3087.109026][ T6669] device bridge_slave_0 left promiscuous mode [ 3087.117913][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 3087.129497][ T6669] device veth1_macvtap left promiscuous mode [ 3087.135607][ T6669] device veth0_macvtap left promiscuous mode [ 3087.141665][ T6669] device veth1_vlan left promiscuous mode [ 3087.147623][ T6669] device veth0_vlan left promiscuous mode [ 3087.321363][ T6669] team0 (unregistering): Port device team_slave_1 removed [ 3087.339865][ T6669] team0 (unregistering): Port device team_slave_0 removed [ 3087.352541][ T6669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3087.371029][ T6669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3087.440353][ T6669] bond0 (unregistering): Released all slaves [ 3088.774176][ T9185] Bluetooth: hci5: command 0x0406 tx timeout [ 3091.102905][ T3636] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 3093.500465][ T1213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3093.512831][ T1213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3093.520629][ T1213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3093.529114][ T1213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3093.536658][ T1213] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3093.545173][ T1213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3093.632659][T12075] chnl_net:caif_netlink_parms(): no params data found [ 3093.677921][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 3093.685133][T12075] bridge0: port 1(bridge_slave_0) entered disabled state [ 3093.693374][T12075] device bridge_slave_0 entered promiscuous mode [ 3093.701296][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 3093.708549][T12075] bridge0: port 2(bridge_slave_1) entered disabled state [ 3093.720503][T12075] device bridge_slave_1 entered promiscuous mode [ 3093.747781][T12075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3093.759619][T12075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3093.788700][T12075] team0: Port device team_slave_0 added [ 3093.796870][T12075] team0: Port device team_slave_1 added [ 3093.817290][T12075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3093.824337][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3093.850871][T12075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3093.862817][T12075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3093.869787][T12075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3093.898137][T12075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3093.926951][T12075] device hsr_slave_0 entered promiscuous mode [ 3093.934485][T12075] device hsr_slave_1 entered promiscuous mode [ 3093.941027][T12075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3093.951595][T12075] Cannot create hsr debugfs directory [ 3094.019961][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 3094.027226][T12075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3094.034552][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 3094.041619][T12075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3094.090889][T12075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3094.104838][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3094.112826][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 3094.120462][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 3094.132467][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 3094.146497][T12075] 8021q: adding VLAN 0 to HW filter on device team0 [ 3094.159571][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3094.168226][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 3094.175351][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3094.189601][ T9185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3094.199322][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 3094.206442][ T9185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3094.237607][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3094.246573][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3094.255947][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3094.265157][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3094.274137][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3094.284976][T12075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3094.310875][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3094.318622][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3094.329899][T12075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3094.348382][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3094.372101][T12075] device veth0_vlan entered promiscuous mode [ 3094.382479][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3094.391380][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3094.399599][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3094.410075][T12075] device veth1_vlan entered promiscuous mode [ 3094.420763][ T9263] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3094.443921][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3094.452210][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3094.464821][T12075] device veth0_macvtap entered promiscuous mode [ 3094.476432][T12075] device veth1_macvtap entered promiscuous mode [ 3094.491727][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3094.502629][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3094.512565][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3094.524568][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3094.534865][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3094.545468][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3094.555348][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3094.566506][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3094.576397][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 3094.586896][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3094.598967][T12075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3094.608673][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3094.618913][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3094.628819][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3094.639631][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3094.653676][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3094.664398][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3094.675311][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3094.687211][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3094.697832][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3094.708719][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3094.718819][T12075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 3094.729468][T12075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3094.740947][T12075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3094.749754][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3094.820442][T12059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3094.838834][T12059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3094.852195][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3094.869859][T12059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3094.878384][T12059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3094.891682][T12003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3094.930011][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.930707][T12083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.941739][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.961694][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.964947][T12082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.976433][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3094.993335][T12082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3095.001557][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3095.004301][T12082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3095.022528][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3095.026859][T12082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3095.045086][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3095.050815][T12082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3095.056904][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3095.067534][T12082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 2022/03/05 08:54:52 executor 5 failed 11 times: executor 5: exit status 67 SYZFAIL: netlink_send_ext: bad netlink ack type type=41 (errno 22: Invalid argument) SYZFAIL: child failed (errno 0: Success) loop exited with status 67 [ 3096.203916][T12059] device hsr_slave_0 left promiscuous mode [ 3096.213487][T12059] device hsr_slave_1 left promiscuous mode [ 3096.224674][T12059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3096.232100][T12059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3096.249895][T12059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3096.260511][T12059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3096.275473][T12059] device bridge_slave_1 left promiscuous mode [ 3096.281702][T12059] bridge0: port 2(bridge_slave_1) entered disabled state [ 3096.301717][T12059] device bridge_slave_0 left promiscuous mode [ 3096.309974][T12059] bridge0: port 1(bridge_slave_0) entered disabled state [ 3096.325673][T12059] device veth1_macvtap left promiscuous mode [ 3096.331726][T12059] device veth0_macvtap left promiscuous mode [ 3096.338550][T12059] device veth1_vlan left promiscuous mode [ 3096.344464][T12059] device veth0_vlan left promiscuous mode