, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:26:39 executing program 6:
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000040)={0x20, 0xf, 0x21, {0x21, 0x6, "360d3c33b6eeb93469e1cfe606cb61e7723cb600d8ece466261f0beeb45969"}}, &(0x7f0000000180)={0x0, 0x3, 0xc8, @string={0xc8, 0x3, "bcce1a64e92c2bedc2bb716f8c095416161c67c85375fadc3029c76044694925cc652729a42ee031067603e6687fa72a455fa17e9d3fdeb0568dbf571d5259b1cd04c5b9f4704ff9f9a3121e842d0fcabf39ab9b7b4599a14933c5311e2211132c210c6bc2b379b83f2d9ef86f8a5f128ba98934af5c43a1fb3805fecb181348ae679d29f46fa255a83dc0443ca08d3eda725909f2b633b3540c3bedfc60251322908ab3130c49cc35bbf84fa3f2e458e75b07b480e3324f16a4fa702cc839d53227c90077d3"}}, &(0x7f0000000280)={0x0, 0xf, 0x5b, {0x5, 0xf, 0x5b, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x101, 0xf00f, 0x7, [0xff3fc0, 0x3f30, 0xff3f00, 0xff0000, 0xc0c0, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x19, "89081e742f3e5ce7d39937ef740a83a8"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x6, 0x3f, 0xb5}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e1a838e05908e76ac33644c67efc0c97"}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd1, 0x4, 0x40, 0x0, "d7f737ce", "5dcbad8c"}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x80, 0x3, 0x6, 0x2, 0x1, 0x1}}}, &(0x7f0000000d80)={0x84, &(0x7f00000003c0)={0x20, 0x3, 0x95, "7280437c3234cc492fe4e356152b9982abf124067cb087c498ea25dcdc416f15e1ce6fd271a88d4db176ddc92af40ab24a4b9972d920d363428aef7908fe5c0175a803548aac76c4a7650bafdb226fa463b0fee7d22e1aad806aaefe4797b37d26b1c831c87fb57a7873a8f79235fcea71bded6c1d1a2860c5546a06e76cf55cc0c07e9e169415725d1880ecafd0fb577c3d12c184"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x8}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x8, {0x40, 0x2, [0xf000]}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000680)={0x40, 0xb, 0x2, "a04e"}, &(0x7f00000006c0)={0x40, 0xf, 0x2}, &(0x7f0000000700)={0x40, 0x13, 0x6}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "fc56"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x9}})
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, &(0x7f00000005c0))
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x494, &(0x7f00000008c0)={[{0xb8, 0x4e00, "a0f3feefa7434af85057bf20798dc9165cb8c2e7f1f0d9d5c82067f43650296eeca99ee4e808395470782a590737821a71502a4e636065a7ff7ee592488abaf277d0159bc44efc5864854e298656eeeee69eeb3b3f3653c35e6834ccfed2755babfd63572b828bb7538e3e4c156b716a0fecd3a153bc1c93f421e3ca2e0bdec8c06dea2e37f337ae7e8b493e80fe355c8dc03c556d0b08164523816460d9b4a2321bf586572baeb83ff641a178504fad61d2b7dc65c3a5e2"}, {0x6f, 0x4e00, "f0570587d3001144cc182b97a09e290b435d11069c30b42c4bc6b133f44009c892b8e30243ae79a6d0003bc56e1674288c83e85bb0484ffa8af47ba1b3a47b60cec2230c41c2c64528124342af005b4e8754b6db6f150c916ed1b39c2a64c47a8ea05eeff90e3899f424fd8ac4adfa"}, {0xd1, 0x4e00, "2ef495a4317821d5ae2a8504f1b94a2af23e71afdd381f2816289bc921350285bf362c63b9ded0bc255fd0cb79dff0fd95c2b817589c237fcf9b9fcd2b18141428d83f47c6126265b19980e0db6f431ae40de7a5fbbeeedecfe483a7dbfe13fb44ed8e2ac44a13d5349af77f0dc4ead990e5cdea497097138c54af73ec83c335dc9509eb0bfe56e3347169b9f77b866f645040da094997c44822842dcf3268226a30d7a0eec3c7aa4d5659b441b40bdcad187e321fd450ef4cf58e17c980bb87c189547abf23d0d6024360600f2c5dba6f"}, {0xfc, 0x4e00, "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"}, {0xe7, 0x4e00, "9b3ef7adda18572e2df218a0056eff32c02ea9fae3ec49fe2b845104d65185ba1dd89f559e932809daa5c56205d3379f7d8a7a1c3e04960239a6c0c48bdb3db2a37fd71fa83767b0f45a06f7bb0db39ea9ad6b8942def5483a788000e5595eaf6167cbdb3b73e0c7770de6bb06c77e8a1fa126f2951bae7300930f8d955f3f70651c9a070d058309fb85236ff31daefde01d322656456071d3bfc48d9c7f8cdb93cb6e3a3674ff66ddfa6b61a9dfa3dd7032605f7351850f6b4e102fd590a8d618fe2c58f4672c6ff190d38be669e06773f6d078f96e14478f97d89150a09fe06c75bd6ad9d4ec"}, {0x9c, 0x4e00, "ac1b1636ec5a20dfa1d4e97531e290dac09bcd1ea68f2f2a96974b57f39cfa0ccbea272022deb5f18649f603be4dc897e7ea942674d350739a37f291a7356c835954836df9bcb592bdc6631d49e07e628fe67a6ee2814f1dafaa4e6c2e518c90516f4180139dc7071e3efaf07f39ab1054693355757d919a42bda0f5db46d4b7eddfe22e9aef634ea6c291eb19b6e5eeb1077694953e6dd587b3dfc2"}]})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e40))
syz_usb_disconnect(r2)

[  720.088616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.093411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.095829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  720.105895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.109968] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.118322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.122648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
21:26:39 executing program 4:
sched_setattr(0x0, &(0x7f0000000000)={0x3b, 0x6, 0x10000011, 0x5, 0x7fffffff, 0x8, 0x100000001, 0xad8e, 0x54, 0x1ff}, 0x0)
r0 = fork()
ptrace(0x10, r0)
ptrace$getregset(0x4204, r0, 0x1, &(0x7f00000000c0)={&(0x7f0000000080)=""/62, 0x3e})
wait4(r0, 0x0, 0x80000000, &(0x7f0000000240))
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x3, 0x40, 0xffffffc1, 0x3, 0x10001, 0x0, 0x0, 0x1, 0x3}, 0x0)
socket$inet6(0xa, 0x1, 0x7fffffff)

[  720.258674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:26:39 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3f, 0x4, 0x3f, 0x1, 0x0, 0x7, 0x110a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f00000000c0), 0x9}, 0x8000, 0x2, 0xffff, 0x6, 0x3ff, 0x40, 0x40, 0x0, 0x81, 0x0, 0x400}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8)
sendfile(r0, r1, 0x0, 0xc0000)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x7f)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=ANY=[])
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

21:26:39 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f56f94"], 0x36)

21:26:39 executing program 1:
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  720.622800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:26:39 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x0, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:26:39 executing program 4:
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x3f, 0x4, 0x3f, 0x1, 0x0, 0x7, 0x110a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80, 0x4, @perf_bp={&(0x7f00000000c0), 0x9}, 0x8000, 0x2, 0xffff, 0x6, 0x3ff, 0x40, 0x40, 0x0, 0x81, 0x0, 0x400}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8)
sendfile(r0, r1, 0x0, 0xc0000)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x7f)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=ANY=[])
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

21:26:39 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x4)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:26:39 executing program 1:
perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  723.484139] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  723.486870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  723.491046] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  723.496429] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  723.500706] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  725.531667] Bluetooth: hci3: command tx timeout
[  727.579793] Bluetooth: hci3: command tx timeout
[  729.628592] Bluetooth: hci3: command tx timeout
[  731.675675] Bluetooth: hci3: command tx timeout
[  748.409758] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  748.411174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  748.482069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  748.483480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  748.886850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  748.892173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  748.896903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:27:23 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f6948343665"], 0x36)

21:27:23 executing program 4:
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000018c0))
clock_gettime(0x0, &(0x7f0000006f40)={<r1=>0x0, <r2=>0x0})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006d40)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000140)=""/174, 0xae}, {&(0x7f0000000200)=""/48, 0x30}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/25, 0x19}], 0x4}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/164, 0xa4}, {&(0x7f0000001500)=""/175, 0xaf}, {&(0x7f00000015c0)=""/123, 0x7b}, {&(0x7f0000001640)=""/89, 0x59}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/48, 0x30}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x9}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000004900)=[{&(0x7f0000001840)=""/125, 0x7d}, {&(0x7f0000003900)=""/4096, 0x1000}], 0x2, &(0x7f0000004940)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, <r3=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r4=>0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, <r8=>0x0}}}, @rights={{0x24, 0x1, 0x1, [<r9=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000004a40), 0x6e, &(0x7f0000005140)=[{&(0x7f0000004ac0)=""/88, 0x58}, {&(0x7f0000004b40)=""/177, 0xb1}, {&(0x7f0000004c00)=""/223, 0xdf}, {&(0x7f0000004d00)=""/54, 0x36}, {&(0x7f0000004d40)=""/47, 0x2f}, {&(0x7f0000004d80)=""/254, 0xfe}, {&(0x7f0000004e80)=""/137, 0x89}, {&(0x7f0000004f40)=""/106, 0x6a}, {&(0x7f0000004fc0)=""/148, 0x94}, {&(0x7f0000005080)=""/178, 0xb2}], 0xa, &(0x7f0000005200)=[@cred={{0x1c, 0x1, 0x2, {<r12=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r13=>0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000005280), 0x6e, &(0x7f0000006380)=[{&(0x7f0000005300)=""/31, 0x1f}, {&(0x7f0000005340)=""/4096, 0x1000}, {&(0x7f0000006340)=""/39, 0x27}], 0x3, &(0x7f00000063c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000006440)=@abs, 0x6e, &(0x7f00000066c0)=[{&(0x7f00000064c0)=""/104, 0x68}, {&(0x7f0000006540)=""/101, 0x65}, {&(0x7f00000065c0)=""/79, 0x4f}, {&(0x7f0000006640)=""/79, 0x4f}], 0x4, &(0x7f0000006700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, <r14=>0x0}}}, @rights={{0x18, 0x1, 0x1, [<r15=>0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f00000067c0), 0x6e, &(0x7f0000006ac0)=[{&(0x7f0000006840)=""/29, 0x1d}, {&(0x7f0000006880)=""/113, 0x71}, {&(0x7f0000006900)=""/133, 0x85}, {&(0x7f00000069c0)=""/194, 0xc2}], 0x4}}, {{&(0x7f0000006b00)=@abs, 0x6e, &(0x7f0000006c40)=[{&(0x7f0000006b80)=""/190, 0xbe}], 0x1, &(0x7f0000006c80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r16=>0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, <r17=>0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}], 0x8, 0x0, &(0x7f0000006f80)={r1, r2+10000000})
ioctl$F2FS_IOC_MOVE_RANGE(r15, 0xc020f509, &(0x7f0000007200)={<r18=>r9, 0x76f4, 0x6, 0x6})
r19 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r19, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r19, 0xffffffffffffffff, 0x0)
r20 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r20, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r20, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000007240)={{0x1, 0x1, 0x18, <r21=>r17}, './file0\x00'})
r22 = syz_io_uring_setup(0x1027, &(0x7f0000007280)={0x0, 0xae5e, 0x2, 0x3, 0x1e5, 0x0, r7}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000007300), &(0x7f0000007340))
r23 = fork()
r24 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r24, 0x1, 0x11, &(0x7f0000000000)={0x0, <r25=>0x0}, &(0x7f0000000040)=0x5)
setuid(r25)
sendmsg$unix(r16, &(0x7f0000007480)={0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000006fc0)="5ba11acbc5b3b1bf6d5ff833e6f2f6c7728101523623ffde8e24ce897264fdac70d099d62181f96967ba9bc4a702d09ffce50f211cff7cc48a9ad86ee596352d", 0x40}, {&(0x7f0000007000)="7bceee486f0d67a5be85028570ed6410befaf1a4a554d420c00fd5496dd71c615cfa880c73f4784f3d225ffdb9332add887c12030653a61f8011e8e1c296e63249b809556382ca75877f62c1a99803dc85527d532ae1da847684828f6f500dd753143ab06d1cd490543b3f4ea1eca2167d835c79e2ffa124e14c021941caf911dc1cb837b1950e2b6ef5bbd85586b1fb5da4d8198a6c92728d26c58c4620da846aa8cd254abad67a13bd3ae236335e2f239cc4406194625d2e703a3c", 0xbc}], 0x2, &(0x7f0000007380)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r11, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, r13}}}, @rights={{0x20, 0x1, 0x1, [r18, r5, r19, r10]}}, @cred={{0x1c, 0x1, 0x2, {r12, r8, r4}}}, @rights={{0x18, 0x1, 0x1, [r20, r3]}}, @rights={{0x18, 0x1, 0x1, [r21, r22]}}, @cred={{0x1c, 0x1, 0x2, {r23, r25, r14}}}], 0xe8, 0x10}, 0x40000)
ioctl$KDADDIO(r3, 0x4b34, 0x10001)

21:27:23 executing program 6:
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
fchown(r0, 0xee01, 0xee00)
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
pwritev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='\\', 0x1}], 0x1, 0x0, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r3, r2)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff}, 0x0)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)

21:27:23 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x0, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:27:23 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x129400, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0xff, 0x800, 0x400, 0x9, 0x13, "91ee75c3f3c817aa"})
r2 = syz_io_uring_complete(0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r3, 0xffffffffffffffff, 0x0)
statx(r2, &(0x7f0000000180)='./file0\x00', 0x6000, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0})
fsetxattr$system_posix_acl(r3, &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x2}, [{0x2, 0x0, 0xee00}], {0x4, 0x2}, [{0x8, 0x3, 0xee00}, {}, {0x8, 0x4, 0xee00}, {0x8, 0x4, r4}], {0x10, 0x2}, {0x20, 0x6}}, 0x4c, 0x1)
ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000000c0)={0xff, 0x3, 0x9})
syz_open_dev$vcsu(&(0x7f0000000100), 0x5, 0x0)

21:27:23 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:27:23 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}, @random="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"}, 0x1b6)

21:27:23 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x4)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

[  764.055478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  764.059032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  764.076314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  764.089064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:27:23 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000440)="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", 0x1000}], 0x1, 0xffffffff, 0x3, 0x2)
write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r2, r3, 0x0, 0x68e146a1)
fcntl$setstatus(r2, 0x4, 0x44000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$VT_RELDISP(r2, 0x5605)
ioctl$KDSKBLED(r1, 0x4b65, 0x40)

21:27:23 executing program 4:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000080))
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0x130}, 0x18)
lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.sockprotoname\x00', &(0x7f0000000200)=""/33, 0x21)
setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:audisp_remote_exec_t:s0\x00', 0x2a, 0x0)

21:27:23 executing program 4:
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6a6f75726e616c5f617379ee635f6333254cac9d0f27407830303030303030303030307f9ae815fde1cc48cf30400000002c0007bd51a28bd30020"])

21:27:23 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x0, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:27:23 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:27:23 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f6948343665"], 0x36)

21:27:23 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[  764.507359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  764.552741] ext2: Unknown parameter 'journal_asy�c_c3%L��'@x00000000000�����H�0@'
[  764.558431] ext2: Unknown parameter 'journal_asy�c_c3%L��'@x00000000000�����H�0@'
21:27:23 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00')
pread64(r0, &(0x7f0000000180)=""/61, 0x3d, 0x401)
r1 = fsmount(r0, 0x0, 0xe)
connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e23}, 0x6e)

[  764.661372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:27:23 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x4)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:27:23 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  764.818923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:27:23 executing program 4:
r0 = gettid()
rt_sigqueueinfo(r0, 0x8, &(0x7f0000000000)={0x15, 0x8001, 0x2})
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)

21:27:24 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:27:24 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f6948343665"], 0x36)

21:27:24 executing program 4:
clone(0x5c01f900, 0x0, &(0x7f0000000000), 0x0, 0x0)
clone(0x1000000, &(0x7f0000000040)="996baebd6a089a86215b3c4698006b9d7ee19a71ca541efaecf66b4efb080be4f626e1668acd19894e7017c16e92288afea77abd713157af85ffe00aef28ce32dbd87078cb791fbcb0c9534819b7ec4aea3191e49d32d3ddc844079874ac9bae90457e116712509ca343e4842bd3b413ebb33be6c6177f1769e854744f065fa4637494e13652d490fb3cde84d4bf71237311b8da4faa2f5dd2e1c5215bc81b", &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180))
clone(0x40040000, &(0x7f0000000180)="597fb54974739dca7818736d2ba7a06bf86029554b7d4a16e4da07a5288446d9d088ea5ce59c9fc2f2af5eb169875dfb50158a0b1e98fe11d9c8b42a27979fed8245032dc5c94a1a50e613cd67abe65ca860551dcb6e12229a77229955f0b0af6cf9797f65a1a5d5a919ed3f82c83b42516f31777548f3e82de3e25f841647d17eba03a3c1ff0e52cd9cd9e9b7bc7b1dc9404ac12be763a8c48672b7121b3f0ada18d0b60ca673601a6a11b8a4f738b9adf984af39dcbdd8", &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="c2de2299ac0a1a6070335b427e")

[  765.061356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:27:24 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="002920042f66696c65300a485827fe36bd5a7dfbaf6c818ca397b7809e5041fd3bf50c3343bb48016061096f6adacef414d42e031ac1e6561c8eb86a35864ceecb825dde7ff381c82912850aed6fa39db7e7b2a065958d5a09e27e0e36c47dc108b184445cc43dc962777bdd7693c8a31373a66f17e2878159c7bd90b00e6bf0a8f323d00f3bafd7b8236b413fbb675b18ccc4272fd4f36612d0ee07ad5f2e9eaf6e419540aa639375d9f0b95a5d94f552436b739cfe080dee50d4d6ca7f1d8ec3ba8e8e5f"], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
ioctl$TIOCEXCL(r1, 0x540c)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:27:24 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:27:24 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x4)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:27:24 executing program 6:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}})
syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="2004a200a20712b7b3468d4f599231f268cc7c0b3e479529d29fb7c3043ae969e7242d8679bdaaa721a2767eba05fdf6ca4b9b761d12755c4de66d4a66e02d0d9301403cbdfaf1875f832f218499a4faca4ef459f914269306a9c71d944766fa019d7be8691435e548aa33a0b7ff050d8324f47206da556e9606e5de7000007dce0025d2d81ac3c574d9013ddc0283c2acb87d85f172862ce26d4ed8d5059238ba3c7084a10a381fb5e601ac27833036eeb7dca3277a6b1e30"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x240a}}}, &(0x7f0000000440)={0x34, &(0x7f00000001c0)={0x40, 0x13, 0x48, "4891c2bfad665f6fde2437ef3d273b7ffb68b6b84fa10ec2cc8b8b2a085f7d6b1f9abfe2512e86ffd0de2f91ee410227477d1eb31cd4f1c70e159b30dbf8eab4b2290f11d248ba59"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x20}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000280)={0x20, 0x0, 0xf5, {0xf3, "fd62cf999f800cdfb53079d906105c48e8c3a2cc0402d07c83b9ea2af15d245be320b3277919f5ea68252daa8d5857ca5f71a2b5b33b8745bc7bc298d18feabacd6ca47c3e107e700957d379274f8d0e0698fe469c41fd2650bb46df34775eaaa0a4160345e27af19322b0103c32c7f3b8819532636308cbb9679bd937302d27082d0a0d03171a5fa68712767efdcee1ec96655535c9f01db14b267e7444d107da75d5147fc4f37cf86248235dab2e4ab75ca9f53aea491da858e04f19508b895d4ffcdb7e17fca6cf31919c5ed73cf8035ed9340df2691d17501d732fabb7d6df1826fc7e7d43ef9fa49edcfe69707fb26e25"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000400)={0x20, 0x0, 0x1, 0x2}})
r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x0, 0x23, 0xde, {0xde, 0x23, "6b8d1d0a71443938904434f8414f0a58a04b7d4da1cb67e0edb9fa6535143441080a13cc080ee41b2d78d4e2c45c03c0e80d1f2773b7940b8ef6c3c4fe58b166ab19b7598b12d7457af08aec6631759ac99e5e82d7271ed3aeec031d6811ddb50d33fc138f2f9fa7a7c0b1ee3803cd7b0744c42f6744ea04ff8a779e8ec80cac1ae4f7cf7f677ecf696aae39c7e5ecdd7d7951542ccee7dceed5338a82de41b9e0ff28fc4aebbc7890c14b6c427a31fa13dfc4658b9a2bfe5f41c4b424542303228bb9aaeabd82a420c213ea388443b3f8227922d9ed40a05f2a6640"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41b}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000600)={0x20, 0x0, 0xa2, "86d6738cf0e8fc06603f1062212fe7c0abb8397f447ccab428f7faea268cf9992b0f2ebaf28dede8a1d62779926b7b765f03272d91138c633dfb43d8d86eac8e45260689c36455e8713cade5f3c81a7d0c64779faa441c8a4250338c9ad679f57832b7760762a01d2ddedb474a6d0ea6505b66f8eef942a28a4e98eda3d76b4395bb6a0d65fe5c8431e453e32f066e69fb9c9f0bf1ff919b0cc029157dfb80f66242"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xe1}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000740)={0x20, 0x0, 0xc5, {0xc3, "24f2f942d22dbe69c7c6ac33ee7deba8f3e17edf1e20dc998c04d4de53682b4007cd9295a82e167aa06b3c37cba101f16ca5405012b76e11dfc5355f02b7f7ca295397af01c06452a75fa33e3c251d02ebd6a07b8b672c085cec1d36d6f0c4187a454c033bbe285ec8fe1951471711bc3d80298d5c05ed5444a34ab69e3fda72c96d050f9e54a4bd820a1f143b02909d11c5fa89a2883f549d31c3546bb77fa8a58ea5bbac225dd04bbc1b67ea9b329dd3e1ea7ccdf954669943a6d2039e449312d3e5"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x3}})
pwritev2(r1, &(0x7f0000000180)=[{&(0x7f0000004ac0)='J', 0x1}], 0x23, 0x0, 0x0, 0x15)
r2 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x30, 0x8, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x40, 0x9, 0x7f}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x8, 0x4}}]}}}]}}]}}, &(0x7f0000000d40)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x201, 0x2e, 0x81, 0x80, 0x10}, 0x147, &(0x7f0000000980)={0x5, 0xf, 0x147, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "2977759f664e31e9cf897d05e077019a"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x8001, 0xf00, 0x6, [0x7e30, 0xcf]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "b720e160326eb500bd90d281fb75bb7e"}, @generic={0x84, 0x10, 0x3, "d68dc5029ed80a4d4315bf939752a67d6087d9761a77a717310494d18fd72fe45a2ff147a3b59963a4e9f75137710b5e3ff4af541facef1a0a737aa9fa488cd0a17cb9f6008667af0324f12ec9c593f3f761ae4540b3f5726bf5e7fbf1c0a541654cab800a7bd2a6af25b40e0e91757cdf8e78f72969bbdb2fe3b31c3fb46f4492"}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa7, 0x4, 0x1, 0x1000, 0x7}, @generic={0x77, 0x10, 0x0, "6fa7785063a08ea7c574dc2a4562618ba62c525c061350266aa1b75f0da5118e86825ee78ef66a236f37298d898c1021adf1ae2aa2f46d0c8bd25cafebb2261c2f911667e7630c6484aae90cf5db2f5a3f870a1310239d849518ce496468749f8bfd277b928c98b2f156ecbd5dfc092d671cd624"}]}, 0x7, [{0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0xecf5}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x406}}, {0x79, &(0x7f0000000c40)=@string={0x79, 0x3, "17b754050af1a401ea2efeae419c58691893b5b1aa00063e2207b2c65d7c2aee8f651ec93a9321c68767ade7b65962c99390f708682ce4e7ca38aa4ca95dfd0346b9515530ae74c70de08c3513462712cc819a389d9da65f5d3d7b84ebd716644b9a46688d353160a52dcf8a98070464501cfb7d6697cd"}}, {0x66, &(0x7f0000000cc0)=@string={0x66, 0x3, "9719aa77ab81e1c8abde4c9cab2d50a886ae7c33eb10c448df5203b86ddfc3d6865a7659158e278e69b0c5a1e080f9df0fb1198d7d8d446d3d48e4af644ae1ad3753a3562ec4fe9aceba108f2f9bfcb800565807185682e724f2dc5a10b1a5a8f0b5b605"}}]})
syz_usb_control_io$printer(r2, &(0x7f0000000f00)={0x14, &(0x7f0000000dc0)={0x40, 0x3b, 0xc0, {0xc0, 0x31, "a8ad0a323a755402f8f4f5f25fc47f70366984c8164819562d0f5835b9c17ec65155befde0428fad2c58c1310bd2f4978af642d65ae0d708d4639d380bbdd99f1ff314995779e7b0a3f7823757617432f2d87afe79bd3db9d8bce0b199b93baa51c9073d88c111c14e2d0f089c46582e3b2a2c3c6210cca5c23b33e45714b33c600015e692dd4845653841c7b138d91803dfdbab06cde79979bc5828a6f808b7aed3e892424b138fda295c22b86ee92840913db7a1316c9fc21810c8da41"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f00000011c0)={0x34, &(0x7f0000000f40)={0x40, 0x17, 0x80, "d77db605e1d5f050f6d5ce61b69a3cb4180efb69969fd8e1ceb3e8467e7fe9cf367a41c62612a08880a398a01a8c8cb767ac4b54c7f5f2a144fbf946181d16a0b5a2e56295b5db0c0c04188fe359973f80ceed3cb5d3177ea8a2e4cd6bb2d4b20eb3bb060daaab84512235335b23e18e4dc159cf5db3082856f654438ff7d1a9"}, &(0x7f0000001000)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000001040)={0x0, 0x8, 0x1, 0x3f}, &(0x7f0000001080)={0x20, 0x0, 0x82, {0x80, "fc15311143c4ca60e29cc7b8eaebed2170561b76c26b4e344d2ba3f91f8bb7551bccc82e96df565dfa6cbfc29bf2ba62df7a23d550ae921d2991e9e326c260dcdef2bf1f3cca2830203686843ecbf4fafb5ec3e64b2c77cfbb7ff5e96e1418a7a1023b77d42cf749706e0710c2692402525991986a9b548b26a64ca59a56d782"}}, &(0x7f0000001140)={0x20, 0x1, 0x1, 0x1f}, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x1f}})
ftruncate(r1, 0x5)

21:27:24 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  765.478495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
21:27:24 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[  765.483352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  765.577998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:27:24 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:27:24 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x4)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

[  766.012316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.017401] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.433488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  768.439352] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  768.442582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  768.452100] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  768.456792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  770.523697] Bluetooth: hci3: command tx timeout
[  772.571654] Bluetooth: hci3: command tx timeout
[  774.619591] Bluetooth: hci3: command tx timeout
[  776.667827] Bluetooth: hci3: command tx timeout
[  777.563876] Bluetooth: hci2: command 0x0406 tx timeout
[  794.938821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  794.940154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  795.003674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  795.004738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  795.593214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  795.599971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  795.605207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:28:07 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:28:07 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:28:07 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)="396425ec7c88e4fdff28169e3686f3ca992b454c2361d193c8282e70d3e935bf22333fcceff0cb2d27565b7ea9a328e21ef815916247c9650aaf802841710825d3e44cc098799112fa9e8201740ace868d333d84593c96b594c1406f022eae304c897c008f27dca2b6e88bfcaade", 0x6e}, {&(0x7f0000000080)="63541b36c81081d62a4e37f7a1b666a1195bf3d400267748b8fc1e03cac1fd84f15429ad7bfb2c6b36d6f79696849512890d2195ca0945d7553f2c39a81e4741b04bddd2eb7d468fcc468373367b78e860548eee1b9877a5aa894b6a369d28e914c262ecf5948b1e88ca875c913be340a2a155bdec04769c8a110aab932bd6a4b7af4d4591b3c989ccf20d19bf33313d29878d75bdeb6d290079f4d81a5dda3000255425c5c1da9797cbf79c597000ccb1061f42b2dc783f42bf76d1907c7653cc1256345b5406", 0xc7}, {&(0x7f0000000180)="e6e63b804c8ac9c318fa0fb97e655d10274ac8e421e213aa09ad218e68dc003af16ffe4553ce780859c1cc5680284ed1f263e5e54e634dda6f7b6eea52298f21ac95e40a63b99c88c908b23ac472481af76d043f1d9be8227c85df336c719fffed12d9de5c4f8067026d8b4f759f9a3bae82c28cff57ceabcdc833bc1772417edf42ab9dac7ba1d119e82da8e3f06b48f92e20cc2a23b18b43640c73ece886fa782f2588135062a4a459fc326b4f3d0f8f7a6ec6cdf65e890ccf4a88c8b84833eb23ea19ad1067bb3f94e83fbba1881d9a8aa53fb1c608bc584ecb3b6aa703da178771b971c1c2878d75", 0xea}, {&(0x7f0000001540)="4fbcfcdff4ba33e62c751265e116fd9a92b4b97eca83c894bad3af69f5101ae13abdd553456282cdc8c32ee90476989d7c658627c5804ed8ec7b3fef56d1835ffca528696142e77b13f0ab4878b1bd21ad50a42c710c88f1758e3d834205e44cc4d9500b8ebec7285ccf2eea10d1184573f3715c6875291302e7a9bbf516f22e", 0x80}, {&(0x7f0000000300)="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", 0x650}], 0x5)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000280), 0x8)

21:28:07 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f6948343665"], 0x36)

21:28:07 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_tcp(0x0, &(0x7f0000001f80)='./file0\x00', 0x0, 0x22, &(0x7f0000002000)={'trans=tcp,', {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}})

21:28:07 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:28:07 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x4)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

[  808.159911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:28:07 executing program 2:
prctl$PR_GET_THP_DISABLE(0x2a)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000200)=ANY=[@ANYBLOB="b37f080211002001"], 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x9d}, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[  808.245167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  808.262125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  808.268099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  808.285985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  808.590932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  808.596190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  808.604167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:28:19 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_tcp(0x0, &(0x7f0000001f80)='./file0\x00', 0x0, 0x22, &(0x7f0000002000)={'trans=tcp,', {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}})

21:28:19 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:28:19 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x4)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:28:19 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0xffffffffffffffff, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:28:19 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f6948343665"], 0x36)

21:28:19 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000100)=@broadcast, &(0x7f0000000140)=@ctrl_frame=@cf_end={{}, {0x7ff8}}, 0x10)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@disassoc={@with_ht={{{}, {0x7f}, @device_b, @device_b, @initial, {0x0, 0x3}}, @ver_80211n={0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0x25, @void}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x5}, @device_a, @random="35ef67b8c4aa"}, 0x10)
syz_80211_inject_frame(&(0x7f0000000180)=@device_b, &(0x7f0000000280)=@mgmt_frame=@action_no_ack={@with_ht={{{}, {0x5}, @broadcast, @broadcast, @random="d5de4cddc862", {0x0, 0x5ca}}, @ver_80211n={0x0, 0x2, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, @sa_query_req}, 0x20)

21:28:19 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
writev(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)="396425ec7c88e4fdff28169e3686f3ca992b454c2361d193c8282e70d3e935bf22333fcceff0cb2d27565b7ea9a328e21ef815916247c9650aaf802841710825d3e44cc098799112fa9e8201740ace868d333d84593c96b594c1406f022eae304c897c008f27dca2b6e88bfcaade", 0x6e}, {&(0x7f0000000080)="63541b36c81081d62a4e37f7a1b666a1195bf3d400267748b8fc1e03cac1fd84f15429ad7bfb2c6b36d6f79696849512890d2195ca0945d7553f2c39a81e4741b04bddd2eb7d468fcc468373367b78e860548eee1b9877a5aa894b6a369d28e914c262ecf5948b1e88ca875c913be340a2a155bdec04769c8a110aab932bd6a4b7af4d4591b3c989ccf20d19bf33313d29878d75bdeb6d290079f4d81a5dda3000255425c5c1da9797cbf79c597000ccb1061f42b2dc783f42bf76d1907c7653cc1256345b5406", 0xc7}, {&(0x7f0000000180)="e6e63b804c8ac9c318fa0fb97e655d10274ac8e421e213aa09ad218e68dc003af16ffe4553ce780859c1cc5680284ed1f263e5e54e634dda6f7b6eea52298f21ac95e40a63b99c88c908b23ac472481af76d043f1d9be8227c85df336c719fffed12d9de5c4f8067026d8b4f759f9a3bae82c28cff57ceabcdc833bc1772417edf42ab9dac7ba1d119e82da8e3f06b48f92e20cc2a23b18b43640c73ece886fa782f2588135062a4a459fc326b4f3d0f8f7a6ec6cdf65e890ccf4a88c8b84833eb23ea19ad1067bb3f94e83fbba1881d9a8aa53fb1c608bc584ecb3b6aa703da178771b971c1c2878d75", 0xea}, {&(0x7f0000001540)="4fbcfcdff4ba33e62c751265e116fd9a92b4b97eca83c894bad3af69f5101ae13abdd553456282cdc8c32ee90476989d7c658627c5804ed8ec7b3fef56d1835ffca528696142e77b13f0ab4878b1bd21ad50a42c710c88f1758e3d834205e44cc4d9500b8ebec7285ccf2eea10d1184573f3715c6875291302e7a9bbf516f22e", 0x80}, {&(0x7f0000000300)="73f7e05f6c8f8c05c13e0341e437e0093edd31f2d988d4ce3bf5a5d573fffd3e28befcd4640fcfbc08e2f8af7e0d3fa2409be4866e447fa55f448a83bca4e4a5fe43f0220c04a48b511f54289da22535a626ff04d956037f1ed7d890601ef7746d9442325b5d5b448d2b112fce87e80b90d1051d27111b96ab74e742e014304e454e2499a28684247383094fd40819445971309e7389cdcacf51e68d9a24a4be6512f65a6d4c6a21f5fba9daa3ad2dcbee137893bff75050a3a6f0e3c19ef5595f41225b7fd811d065b517ab1af6c79dc5c2d242b42c1910eefb5529fd636cc776bdee83dcbd88e472df960bdcd1afbf37460e0a51f21fe728faca507ea3841abb244d970c26adf057dc837fcf2e45e510723d342ee498e6c78e9483693208d36c23c280552762444aa9dff7ff0321a9d30dc9608e019799c4bb1dbd21c728360f44db01215767fb2a3e77f7f55ba3d2b8d8214c718d6ca6f8dd6fcac838ded4b768b3fe5ba701d1485294ef02a29cd7b61831eeadfc2e752dbbd3f41f3ad0e23ab09d3040d99c5ffab7e8d32b670fa97d6ad638ea042a287e70b5759f1118a9bfc838fe94d212da9a1adaaf45e2588fe24f2ca36ad407aab5dd3a647b2ccac7559352295ac7b4a99f6fe25a8bc5790de1d1fa941c415f9f46296b97fbd7f3a7927ff6b96f293f7ef205f8efbcb11deb91fa85833daf6df2da82f978469aa7030499c8dcd3152009ec9f9268cce32aabe03c73268387669c46285fe27b7457ae47535ab9471f90e05f784cb631b9d7344479acb4f6e464e6874f8d2cbcd8542c3891d5f1bc5e2f82a996d362301439849f856eee03090022f04130a602e9fc17c998378edcfe922ee4fc1e5301a8411cb1e95a8d8730763cc6ed2808ef00e0c495b3ec95fd7db93757266a52025fdd117e1e370c75bf7efba3853ba477100d0eec6e8de33d8e8f7c48d2985318c547becfbecc1154985231b172ab3bcd3c56c52424828800c61995d5c60d09eb64385b995bb07a3b765e5f1d86b1c36fbc13be5b056b9d1ba166d3234f793fa0141b4d18c31d6a423cf40fd0d9929214616f82fe8854f3cfa8d163ee835d9c25736595167c2c88d42365c4afdc835406c23d89ed0398f2fe9458cb525ed47ad943121c7119950ee6612f7edcb4a2491a9e804df233fc88727fc8d7c51d5b6afe6b978c73479c27e4dc46587c73e65206b52ff4a8ed1c7a15b1f958ff74c0ffd447cf0d8a07cd667274e559bd797f8786097bae407469b0b4e974c0e6a5e5270b10aab3d25f137b9795167ef274e38b192a96ec5659205863ddbaa83a1b7c30ff1be2c5e60ebbff70a9358859b89c618bf699fe2683bd28b956699b844662aedd69140ddd551230842f3b4750a9bb2d44bc46720c378cf153d7d558170559dd2a7f659129323e55a246cae443d9c51851b8bdda1551c1b13c54178e29aa88d7756cf151d22a2bbfc8d653864029e7d8c9f03bbb2969a6875088cd053391370e1980cf1e5be898b4345e349ef5bdf6cf51cceaa49b67d2043825e02283d4a45ffa378a124777b63a38e071a359bf96a104a56e9b253c23703c05e532f80edcb236316110311c13a0027b4d40805e563b742cf61660e4c01585025544d2092fb1415d3ec028ed295f9419d0fb1074d1a100603de245a751cfd9c717c015c5d714a052ae3672c54724626400abea6bc17f1afc32ac5e1e9c97fe03d81984770c9e09cd134be78110445930932f89ac4e51afbd2eaac0caeb10ad3e66926dbafbbd8c21cec491434301b1d1d379de53a9d1ed388d51ffb7167be331c313b7db2cdddd98768d99e263164a8f86c901d5e55614cb31157654b22b85e16b284d4e32d33d014cd416dae3e1fdaee7ea8be555a6cb2d3e2b24c686b4569a3158ee6ffd96e46c190368b9d214412c34b0fb1567b9c16ab9899a9b6b85e309435f26b65cbc15693a851852c4f794a2c9950e7b62e37473bb4e13c90e12355b47a09f55d8307e86486730f6f3a676b58132f975524950c2aa30f325759bde5df095196bded00d97ecb02ae2cf35ac1f1f9434fb18ddc9d04757238f405dd55bbcff1faa6a96c6e90abcb32b840e0ce35d959204ff92a8847c54c05132c42ecdf179d56ed45a625a710109d34682a6c4bd5807514614e7230e241eb29ca6df6c7a0d945a83a9ecd0fd7460bab7862518ba1ccb543cb8d477979d11560a1d6cb32a0a0f6384c2c028d80f6a8884375bc028bbd2097b76908373580ba2cb36b9d307ffefe5c2802530be68", 0x650}], 0x5)
connect$bt_sco(0xffffffffffffffff, &(0x7f0000000280), 0x8)

21:28:19 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  820.260791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  820.365211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  820.372379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  820.452720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:28:19 executing program 3:
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r0 = open_tree(0xffffffffffffffff, &(0x7f0000003340)='./file0\x00', 0x1001)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000003380)={0x0, 0x3ff, 0x2, 0x7ff, 0x1000, 0xf7})
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)=""/8, 0x8}, {&(0x7f00000000c0)=""/140, 0x8c}], 0x2, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/161, 0xa1}, {&(0x7f0000000380)=""/119, 0x77}, {&(0x7f0000000400)=""/169, 0xa9}, {&(0x7f00000004c0)=""/159, 0x9f}], 0x4, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r1=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x170}}, {{&(0x7f0000000740), 0x6e, &(0x7f0000001a00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/223, 0xdf}, {&(0x7f00000018c0)=""/112, 0x70}, {&(0x7f0000001940)=""/168, 0xa8}], 0x4, &(0x7f0000001a40)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001a80), 0x6e, &(0x7f0000003080)=[{&(0x7f0000001b00)=""/134, 0x86}, {&(0x7f0000001bc0)=""/241, 0xf1}, {&(0x7f0000001cc0)=""/132, 0x84}, {&(0x7f0000001d80)=""/233, 0xe9}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/23, 0x17}, {&(0x7f0000002ec0)=""/201, 0xc9}, {&(0x7f0000002fc0)=""/158, 0x9e}], 0x8, &(0x7f0000003100)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}], 0x4, 0x40010000, 0x0)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000003300))

[  820.464877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  820.511301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  820.562868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:28:19 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80800)
sendmmsg$inet6(r1, &(0x7f0000003e80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x6, @private1, 0x100}, 0x1c, &(0x7f0000001500)=[{&(0x7f00000000c0)="2fa0e1e7db6134e9c9ecb1550d407f2aff92f43b2fb5e6dd07269d6142b30abcf85392812cb142bd9be532bb10891cb6e3eefe682c978ca9ba5874ba", 0x3c}, {&(0x7f0000000180)="c05a4d3219c9ce0a49171cd5bd997db41bb691cc2a08a95802e687906e576e0ce4451c77709391b0e509f56f3302ac0898a49ca81896e270ae4e71da6eeb2dad86fd137343dcbfada16165175f69b67843f242b5dcdc0dc2f224b018487fb845c1b3ff5c8b503b264b2d92b06d79ac89fa3102bd3c0cd770cc4b5eca5b80226da0bbabfb2ac35d17640431394c12e713aa7da2d430bbdc81a14b3a34eacb71dd2b131b84cfc555d8e9370c99c023fca8dc1c1f841e0b23dea9f4050aae9b0377a85045fae42128c806fb26e3cf9d2a", 0xcf}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000100)="7b94e5b5e73f8a7ad617df26b92e365d0b685f7d5cd7bbdffaf22fbf510121618a1df0", 0x23}, {&(0x7f0000001280)="20752bd3d731f84d4f8768e4df4fe212d2d89f0d47979eda92debf2f4574a9ecc3f2424c2e4966102f9549cfb1a8c8e1df6c2ffab5737aef063051e0e227389baa6347c5e0352a66946c5dcef8a32e31194630ea7db36166f2118555ef08abcd347e72d53ef9541cb5ee31a405313cf4702090bb1922f637f2e90d719df3626c7a54a7a6c8f55961747f5342833d0845f7080979e27e165ca88511c4339e8673600564e2a73c918e8a9b7aa0f80b0b1a7160a212982a3caad4a19eac5a464cfcfa97172caf17e7fe16ee1bec0ff89ea2410a12c4750b0495528887c51efd23d5a8a503fc6dd15f21ca108b51d19550503487a2a0e39a180519", 0xf9}, {&(0x7f0000001380)="c907a70e8c95212493f8fc32d2c98a85383cc4388726980697c9fa72578c93b37f1b823c7afc6ab91d8d2fce30f793dbaf7dd9ac78926bddbab4d8e5f790c78f5c7b020ee2dd25536cda6a3aec7ec6e0ebaae7573d199e76f9e1ce70149aa80ae55364b515a6a0e6a77b7c", 0x6b}, {0xfffffffffffffffe}, {&(0x7f0000001400)="cd6c2dfb71863462e927b50551c50c49a3c78189200511c2952c773cf649ddc71f52107ee7690fd9a0bbb5e24f60ed2d09c0d81b8dddf6a7da1b41dd8bff16535a0c5aec1dbacc350b5332a9b7d84d2f66982c8823cad9bd42b3e3043b36069e551966088dafaf233726487421c3f2cd6363", 0x72}, {&(0x7f0000001480)="4667f52fe960b2db02dfa85f7f3d5ee36eb40065e3b381e93231b878c226f3b7f4e0957793acf677cd4f7867e351062f2d8fcba707eef99cb78502bcef804216cc13498058160dbd5365e86ee9f849fbf39b7ec33ef31ef2ab8b789097bd63274eaa4a0374e30f4302f9260db852bdeedccf5412", 0x74}], 0x9, &(0x7f00000015c0)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x87, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0xe2}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x5}]}}}], 0x48}}, {{&(0x7f0000001640)={0xa, 0x4e22, 0xa94, @loopback, 0xfc}, 0x1c, &(0x7f00000038c0)=[{&(0x7f0000001680)="2ac0ef58edbae22f2ff00fcb22494ead2ee5d038f1f161bdc7745a3b8234ef1155065b05da8f6b8f8f0b2e5f70e797e97d5360a28d9da9b386f2df39ebd6ee49a8a491b785e15d", 0x47}, {&(0x7f0000001700)="189087bdf37506750a6ca9e86d7dc04a7445450937edc61246e6f39e6347515c3cf7713d1d63d32ac383dc9853590679bfb43e8098157aa9bfb4e04c9e47593fe28f0604e8b8a394fa5b92c14c2990895585ed6895451884e592bea1eeffef084f2260bd2e7dfd5c0de1e8f2eac9ee8de41c79fc5b5d6e", 0x77}, {&(0x7f0000001780)="c6df520f00634c0fefad5527fcd5f456862b2e666f833fa26486aa8b30fea2dc05e033f86ed174ad1486060aa00e2fc023d18259918d1884342e75622af039f47a8b3e1ba36ca1a14a09fd3328166ad6b02bd481a528d1dd3b36e3f6b8143935ed079801a46fefd7d487635b84227288014c159ff27832e465c1aca433201ae22cada2ba761c1f5775e120cc10c7f6a2356c4a6c0ef633cd73d71ee1a31036e28736c563249a65b523d1084e40201fa1d31058307d", 0xb5}, {&(0x7f0000001840)="a029166a933ac2f00cff622d17492da3b879b79eb3cfc225bd6efb4e6a91652b0328c7db8507f8ebc10708b41ebf72b537c96b74ed780423f0a110a3ff55eb03a449f05f36751f34d49fe6cb5e65219113f1caaad5d6a680bcf50ce2dba86a3b098c65da29b9c574999cf742b0f0", 0x6e}, {&(0x7f00000018c0)="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", 0x1000}, {&(0x7f00000028c0)="d6e7ee65e7426903de691e60132998fa381bba17da5a15abd499df1f67d9d61a6297a2f403b288d0a5dc826b1f5ce489825477524791ceb88e062c6f3e52007ebbc1c0d2499f06150cede060f17f5c959e0bc7dd1f6840cb5af248962ff271c0c07ecba34d50aafe6a0e85a7a9bdc38c87b2923cbe9938f66a91e6a1765891822352fdd37b9e28b427fe732f16aa08d783861da25d82764f57b5b50171a0c3c2653d0b91b4ae4622f44424d7cb4a687c2bb8a7804a5b240bb0b41c56218c347e1a16bf21db76f0da739e73641e416280acc0fe3897a833c168bdce0e604aae6adb3733a7c88bb567db15d058775d8ff522241f84b692ed25fb7dd33d148ba6fada1a2984aa2bd631b2b88ad95e07f979e90f8ab98f8a2d964e0bf503ce9705c64126a1983cd4eba4fef46a58bc923f1f9bff1986fdbff3eb42fa5ec9c8e451035dffd2cda88aeedb944d5df1d57269913788226449bfe8c7cae5fe862d8a3a4024797d07030943f081ba3c3c7d8c3552733c4f659a5af15cd22fea1a91d6d5c465687a96aaa4ff85712c062a09752a26e98c84356e2b55f8b0a7dbd7580ee9a7afd8f6cfcd6202451cfe07d3a76702f87b5983f3d6cfa48a6e88064c01059824bbd1f5caf0bdd9c1094a8fbb9d4feb8903f04f412bfa34f473cf0c67ca4912e3f842b942695d3ba0ac9978a61856f9b020ef10d7c08f95ed9c3cf70bc447c4c8eb6d949b907e1f9628aba3ec62f3a5e594e7147833d425655d8fe30d2476f1ca64e3c5a6e4f32019249469459fe8c114bdac0a850d9058659069453ca49e3ce0e80fd87c11efbdcdda86cde88082b630255fab1acf9c05d88f591bfad4dfe73f7925ee0aa6b3c2c731e94611afc585725bdf91586218b5178961daa41654a797ea16305217232b9639559a097675605818dcbac228795c8d8b9e9b447d09f4e5e7a95fced4754062e59007cc56b5a387b376b616380e2d5d37649436c51927c27747fdd04381ce0e99f32faf0ac4921fd74e0db46329b44353f0eb06142ed10edb01c3cadf53af5bf2e6fe2211d321966a16e516c5e0ac9355629be947db185fed2c80c58507b28932c014c2552dc3f08093eedff7b489cf4a4402c4799772bffb5409efef23af9903d0f4014f86f69d8a631b5c4e18b589d6f2a2ca904d529d4cf153d310c3f7347a61c2bd9a33945e0408938e0eff14b84aadc4e174277d904b4ee45546a6ceb8911a327902cd58d04f03df7d95d44a10d326ed14a8b58cc699fd78cd2c4dbcb30bf3b9973755734296039c2e120b0f6d91981f63eec878bd57eba9634c1754f1dae98f70b7e69a2b6e0a0ea88dbd3d0b47e317345791f5c801307eb91f7bfeaf1874a111c3fb6b9bffc6ac972b35dea03d840dc186df89f78852e4b85863ae2670591af57b3e55ba9b5f3632f6354b5f02cebd5730fb7ad16f60e5b279c825c9925c35425149d494b8711f579429922012380c15c7ee517ec1765ddf9cd1769319da009f14642076b04a9634ea231722690f37bf4b626aeee044a585ba8ab861224f99ba2089fe738c5cc81462a5b19471716c87045efc7fcc99a4230c2e953d63ed9a27d5190c11775fc7172a6b0b2b47752857eff398bdb414aac471b6ee6ea53c6c8cfc6aca4973a483855d85b24d1d502f5d3574355c516e7fae1dcfd8eaf35e819fe5a4f99d1d030578ff52f0e44af6e464509e2614515c15b45c50846ef58ef5c7fadc0351a79289e1d1d5928810f219b7666a9355b13019c3bb56cc18f5d88d8436e637a2d342140d31b4f03ac40b9e97fe70233d64fa2d0ba7369731f00a9b140cd4832e4726761dc1a7265d2e2693fb5b790c4cdbb64262d962372b1342e817da5a0e29cdce2ac1085115c98305e014cee572fb7874157687997e0a08673149926df9d405c55b6b65661e0dc3bd39e19639e8eb9f0d214e1b142fe3548534c2b4c74e7c13ba789bd896fde08165b213be47d90766804fb63ad9050efb3c7777dde5902321cf71f8dc263fc5614807fcda4f07163bc777934855b92daee00ec991cad33a64e5fd8eae32882297b840f5c7633544ec02594b1fcd0a81ff7d6fe632a96f751730d9ab89a7615794e2a29d7c86a39c4f205fb52f8e889e7bc989510dd9ad2a594e5e2bcfcbc35db0143b7c4cafa48f8d7da6602486a5cb24547c557d999b924872a3bbc8e442df15073ff2a5019d845fc6df9698c0563ed2cf3857f7c7140b12874e6d97b70375b021036ef66451977bb2868324b77785239dfb5c5223a00d5baea60cabd3f881d8c5bf62440d3e6835ea78d4338b30b06af9008a2a6bcea15dbe65b677ad35421c619bfcb106460ff3709a156c4e2917ba8205c777dfbe8952fcb539d952fb6e1d33fbc2da47d47067c7542c8394876215fb022886d8c2947203dbda39f9ea2a9f1a6812288d499fd409090abc446fec1032df150ed374ada4b31984b72af852f727d45fd9ca67238ac2f44a6178150694016f9e0846d01640d2a5bd3be2dca6efab27bfc54336fe98d9fd7bfba7b5b7bc31b42121464dc29393f6a5b2146bf0c108b8cdf3a4adecee5d27000b4d53376d0bce39cea9534517e8a7b16b2b486631eb869ec28a1dc63c2b4b09c363cff94d3ea63a542e0625da8fbfb83715f23c91c135facc7660050889ba4e424205e88b73dacb37c73b868eab08397b5ae85ed7fef55c0337b7a9589f213e18afd9498404787656c03013de1e31a2668118ac1d9a96d3aceadb36fe68723cd3585c04d64f7c8e2fd31cd936c232ba92a1a24b1f4edc99616fc461a19452f7ee69dd3eb0d3dd1cd9760a5d5a4da5e1a0ba24f152c3469d5de8dbdb2ef469545dbd38f48e6e9fb1456aee88f2fcbad171a13d774e9bfd49ee0f5c0bddb866ee13f40f8a86fd75b989987d9be49668abae83ca4c6ffd267b84568b3ac4ecdf1573bd966a6d31efeb76621ac51dc809b1a76ca5e81910a94abf7245a265779ed640f4cac330bb3c94786fb477159a571bd486c1800e89baf3e9f8be93a380f0e43edde016900d16b3936808a977ab44823385221af0ca657fcdd44c9a4c6e42a1f9d198ba2d0f55ec231843ca31a60cb9f51c248a6b87726fdaa857abc565a1555ade073b4a18f7e9f74df836e5a4741d0fccd934c995b2c19b6d3c51c4ae966645c3520d4520d906043011221f064ac9a524abfaa04bcf8e231f86fecdf4621130cad2de73578abd7d1b722ed7e32e43a6592c56278a3079f919db564f47283e66f903537251c38422b0a3cf0fb9929fe8fd1eaea5ee0f9d47d33752a4eda024ef1d6fdb7f4e13354ff9032feddd71973f6c0f8d914190c9b6de85a48712136b29bc7339e989aeb191908886740a35d9b91c9ab96e587b02d7ae6e4d50121552c3893e7eb1c2abdc3937bb51279926a3f9a9cda21e49db0a574155f7079fab4fd086bc8f25be04342820196482f420aecc4138caa6b4ae177641df7ff67dafd01cc41572c811c1c79ee0ce313b851dd96a4c1a98fc7f12c45f585300bf9ff3b76015b565a8a461e989d6f3cbfdcce712c02d21290c3a7cdd3ebcd969c1414463797f6d2ffe19c1264e5333641cfe97c9934876f0790a2b37a8585270974a1f019b025d02a6a418604d16f311188201bbdf084423a14eeb25f3e711456361b18109c53ccf81830be9145130929f49cf41df140fc19ec5ec701d2bd531235732cf5478609efc30f3d533a46678a142e3840c6733c1d5e7d39dc1ee9b663edaf949cdc8a721b7e312059a554952e3b8bec4d58dd6ad7cd83e2f32c4717f3e07af99608f143bd30e34526c710772bf105052bc756ed69fce09c4a66ec37edc21cb60a297056985e34827872bb8f4194d998457de4423fb8204abc05c7471b12b6a5cb74b62aaa61232a62c6801caac0422273c832fa5300e232ebed670403a406de1e459e84e396126a0f581860b0fcefa3a7f9e09d8b771889ccea5fef9cabe54f2a79a84c00870f32285a18e37150c682fcd753727985965b3cd8a67b8bfafe8467f31168a437a55ef550409314cae2b56a5b4bfdc1a51112f099b4ffe86015bff0bb2f282192983698c9059ad15519bd82881cf88282daaedef0efab6bfca80497d0fbaa613986bf54d65bdab20d17ae147ec774d10c78159d8d2a7ee3f84ddaee1456855fc8f0d8d2936f45f5daf9eef05701da57c64d7eb30f2168f84d27b7a0f2fae585f4e809b542ff4378911fa847d3d5073c200e51fd5f57809072f9f5c0d955df6e6a65f3ee37bad9c0bd7cf630685ee81f4811c89e8815f086a5753f2aef913556435424b4fd73af3345aee3a231d238e03e7799de1d5007d89be9e16ff9411d1e97938267c9cd73a7fe798bf3ec23280401b34537bd8a14ed709c3c94482dbdfcbf943ef8ac1566584a7c1a974a05b22c4bf5893ac2f6dca729112a4d612e4bef5dc7760823cff6cfd1ecbee4881a26b8d44602bc1de00f0f7355336db8684752c418df803e3201338c0866052c2335cf4febe5edd5faa210cd15283a784bbf8d01cb095aa096446370ec5bdc2f006071be8ff2bb8fe6817b78f7ef367660e19d66f3a0a8f976ab7d2675688e243f1833f32ec4189f0963312825bc84d245f0857d4057f741f475cc1c5f375e9e443d9ce24d6910255faeca3ba712ff31ac0c28f29d389fbf0f41e18bbaa0f681ccfb3246ef9e9b91355171400bb91d12886a9724b0e00c99ac91aca2243f5f544b80d54ee25f882f10d8866e9444f0aa16cd89373c261bb7ca34d52fa30004c74270cedef2801c5fa0190a5f289a6035cef9484eb5f4e14333b7c986dcb9143dfeb9c2f7e7846068136ca2a51107389cc42abdc8067e5cc501616fc5f6420ac12ae1ccf92f55b826b9be0c221070592684c76d749ee1363e691f6d03828f7386761d64ae24bb930fa08eb48920ed06fb4731f309e528cbc12ab7d695268a77436ef3646805c2a198a4d2a8253b1d4989ce9041caa2839a6479bb6048d64a2b5c4726fcfd92ede521b0d87e09e74d5ba523a3f68dcb200c8f7b5589b41a977a010c03d266614037c117f79f19435ba3f16752f02a5094d19ae4adf280f8438ce229c49aa576be4f541a3d14a697e518a523a9eb4b32c0973308d1960354d4ad5f923615aaffcaae21a850da5a6ecdef95fca8c41303a78d800ee36eb942cacc327ebf27cfe89412315b0c43b3784ca2654b1d51567a5f5e2ddbbb5b1c2104f35bc4d83c610d4e2be6e9eee1fc029a9a288f27a1612817f1cd9d0208784cb7ba5ed8b11352fdc9a43d1b10487e2ddfe0a1c2556b3c143cef63066050a138157521120016491ca146bbd03a3b3bc89432ef8ac1b78d478600d399d86eb08b30396cbf9dd02da0905995168a88856100b2671bd428c7f6ed8e8b7624495a55c36c6c05a552868086bfe310e6ce81a3411ddae2a96ad6171a39be7c851e1481d17fd309ab462eee6923eafe25d6284d8d15d2d2af41eb0d7e0033d9e64973dde6835cd2c09c28a452f5e6e1c30d3d165406595bbb38a2d39f79ad7399ec850b654fbc913effa3a19f48b2e170236a625fed44ad05d3e8bff52dbed307be77e2c790ede6105c33b6028e7f066229ef6121bf0a195e0f688718f5e61bcf1e84fc0761eca94e0693f13467a1e697612102bced8958110fd957df1ce7e4d4a71537420ddf5b855d52c0749502cfa91561a860b2394bcfc82cb77976482d3000318dd3656dd157cad6d2ffbcba91960a8f20e456ce341d027f1ee6dec2a4839e0b04e487287470725d8399fd3f0a3aa", 0x1000}], 0x6, &(0x7f0000003940)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x3b, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff9}, @enc_lim={0x4, 0x1, 0x86}, @enc_lim={0x4, 0x1, 0x1}]}}}, @rthdrdstopts={{0x60, 0x29, 0x37, {0xc37edd9258210567, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @empty}, @pad1]}}}, @hoplimit={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0xb8}}, {{&(0x7f0000003a00)={0xa, 0x4e20, 0x200, @private1, 0x3a010d4b}, 0x1c, &(0x7f0000003cc0)=[{&(0x7f0000003a40)="94038832a3d60d3f12bbdff42071937ab5a96ff594", 0x15}, {&(0x7f0000003a80)="e566cfb6cc497c15b9f044d3587509c657ec41e7141403ef90f33354aae36e6298d52ebad5e957d610a4b7eb466854550a3fbceef5c487fd0e86d6a1077f438981f51d9a758fcacebd7a21ea270ce1ac53676abbc77118830d56ae35060370f3c02cc180be49572b8e2fec4bd49cc9a1e5736eb332f8f477ff03", 0x7a}, {&(0x7f0000003b00)="9d2ed01bbeae586598defac968a630d039f5adbd59fbc8dd0c3b451dbe8f5f82814e62354894f0a2f5e85d45906a99c4cc6ffc535896b380adc537926990", 0x3e}, {&(0x7f0000003b40)="82ee3efbd14efe531229793b2577e15e555a245f41d95a16c536fcefe08a3f3580aed2a78e26b37cbc80438b42cd9cd26b31734f16082506245a037b96c6e2853470", 0x42}, {&(0x7f0000003bc0)="3c214b65b22a8c89733232e355b8c4cf0584f8533fa0ff20a34275a5dd98bc2ca67cd0c78d1dc9ebcd2ce48137b24e2a2983e8d951102a99431a5d6b8afb303e9139c622c6880dd9b18e37fa2a08ad6f2c79d6958e0a1da309db8e2e80a266825a5d5c510e0b7fe60c97c2f5594281a2e04b5329c16ba17567693e12dcb210424649b408f10c7df55ab08ce7", 0x8c}, {&(0x7f0000003c80)}], 0x6, &(0x7f0000003d40)=[@hoplimit={{0x14, 0x29, 0x34, 0x80000000}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @flowinfo={{0x14, 0x29, 0xb, 0xa8}}, @dstopts_2292={{0x38, 0x29, 0x4, {0x3b, 0x4, '\x00', [@pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @hao={0xc9, 0x10, @local}]}}}, @hopopts={{0xa0, 0x29, 0x36, {0x1f, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x4000}, @hao={0xc9, 0x10, @private0}, @generic={0x40, 0x2d, "143aa2b9b1f1b45e34efae3fff9450d6f398edd38ace1670b6ae1d10c38f05cbef5abe84e52a0970a0486c1e36"}, @ra={0x5, 0x2, 0x400}, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x18, {0x3, 0x4, 0x80, 0x3, [0x8001, 0x87d]}}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x9}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x10000}}], 0x138}}], 0x3, 0xc001)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x68e146a1)
connect$inet6(r2, &(0x7f0000003c80)={0xa, 0x4e24, 0x401, @private2, 0x4}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x8}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000080), 0x10, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

21:28:19 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x4)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:28:19 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_tcp(0x0, &(0x7f0000001f80)='./file0\x00', 0x0, 0x22, &(0x7f0000002000)={'trans=tcp,', {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}})

21:28:19 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f6948343665"], 0x36)

21:28:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0xe8, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xe8}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_LABELS_MASK={0x8, 0x17, [0x1f]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20040090)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="302400004cfbde3f7e80d6a15b9f0cd93fd4b4353f7dc5eab30dc5eddfd850558e9aee51939c56095bb95e2f8f4f05000000983653b78e90946459f4e07e4dc2ce20dd2d3b46a17d8a43b8e4107b4605b265b8b1059ae7de49cb2eb5f50d0a3a4c9c0a4289a8b2bd3f0061e120fd6ccb49368cd5c98da209d72ad45d6eb0aa672192a1", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20044004)

21:28:19 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  820.767062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  820.878949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  820.895730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  821.079617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  823.736602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  823.741895] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  823.743955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  823.748176] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  823.751201] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  825.819625] Bluetooth: hci3: command tx timeout
[  827.867581] Bluetooth: hci3: command tx timeout
[  829.916385] Bluetooth: hci3: command tx timeout
[  831.963603] Bluetooth: hci3: command tx timeout
[  851.807595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  851.808734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  851.877682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  851.878792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  852.255190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  852.277156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  852.287557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  852.297623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  852.307491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  852.335822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  854.758751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  854.762759] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  854.764661] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  854.770843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  854.773384] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  856.795632] Bluetooth: hci3: command tx timeout
[  858.843926] Bluetooth: hci3: command tx timeout
[  860.891639] Bluetooth: hci3: command tx timeout
[  862.939776] Bluetooth: hci3: command tx timeout
[  883.027112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  883.028428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  883.140211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  883.141240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  883.662815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  883.669640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  883.675374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  883.682639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  883.688808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  883.699763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  883.707665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  884.015094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  884.022921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  884.025638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  884.030900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:29:33 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
syz_open_pts(r0, 0x404000)

21:29:33 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0xe8, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xe8}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_LABELS_MASK={0x8, 0x17, [0x1f]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20040090)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="302400004cfbde3f7e80d6a15b9f0cd93fd4b4353f7dc5eab30dc5eddfd850558e9aee51939c56095bb95e2f8f4f05000000983653b78e90946459f4e07e4dc2ce20dd2d3b46a17d8a43b8e4107b4605b265b8b1059ae7de49cb2eb5f50d0a3a4c9c0a4289a8b2bd3f0061e120fd6ccb49368cd5c98da209d72ad45d6eb0aa672192a1", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20044004)

21:29:33 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0xffffffffffffffff, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:29:33 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536"], 0x36)

21:29:33 executing program 6:
syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0, 0x0)
chroot(&(0x7f00000001c0)='./file0\x00')
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_tcp(0x0, &(0x7f0000001f80)='./file0\x00', 0x0, 0x22, &(0x7f0000002000)={'trans=tcp,', {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}})

21:29:33 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:29:33 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:29:33 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@ctrl_frame=@cf_end={{}, {0x9}, @device_a, @random="24274f019674"}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cts={{}, {0x21}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[  894.576024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:29:33 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x100, 0x1, 0xfff9})

[  894.719208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:29:33 executing program 6:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe)
listen(r0, 0x0)
ioctl$sock_TIOCOUTQ(r0, 0x541b, 0x0)

21:29:33 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
readv(r1, &(0x7f0000000580)=[{&(0x7f0000000080)=""/79, 0x4f}, {&(0x7f0000000100)=""/146, 0x92}, {&(0x7f00000001c0)=""/75, 0x4b}, {&(0x7f0000000240)=""/236, 0xec}, {&(0x7f0000000340)=""/229, 0xe5}, {&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f00000004c0)=""/60, 0x3c}, {&(0x7f0000000500)=""/125, 0x7d}], 0x9)

21:29:33 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0xffffffffffffffff, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  894.907111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:29:34 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536"], 0x36)

[  895.029796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  897.774326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  897.778003] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  897.781201] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  897.788757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  897.793535] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  899.867617] Bluetooth: hci3: command tx timeout
[  901.915666] Bluetooth: hci3: command tx timeout
[  903.963658] Bluetooth: hci3: command tx timeout
[  906.011954] Bluetooth: hci3: command tx timeout
[  925.985318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  925.989619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  926.107080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  926.108384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  926.645805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  926.659388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  926.670172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  926.680241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  926.688602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  926.996823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  927.003634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  927.008357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  927.023966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:19 executing program 2:
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @empty}})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {0x5}, @broadcast, @device_a, @initial, {0x6, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:30:19 executing program 6:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0x541b, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x11c, &(0x7f00000014c0)={[{0x28, 0x4e00, "e27275ee86c63adae830690f60c4b5a04db9637dfbfc8d54ceb1f2e1945cbe9485f104940c69d723"}, {0xec, 0x4e00, "da6eef8a8f3c01455d7e492f1e6018a75957294b11b49b8a3e85a12dda1f223f4d0eb0b8aa11e882142f6c6330823196d63c25bca33749aa638b777f98c91fcce856ee3afe7d338d429e7665510cb21f7a65208b021952153bc908d0bc9e423f5923ea4f302989971f55c45e73db04d093c6353ebb24dbdf011b481662f26e4810221b0c04d9856e59bb5c15559de782088498bf39ed3f0140e03727e3633e70670c86b6f21f91201df9b9630b07ab858d0882a28bb9085aaf43fb74cc985d0de2850c42bf5148a90e09684cc1141e23d9c58ab03f86fd2a3cbb2a3ebbd2620f262cc3d953fdac80e4f4e926"}]})
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xb4, &(0x7f0000001400)=@generic={0x6, 0x0, 0xac, "b3d78b21", "205da8c28ae37d630a347b9c095d219f3b60c8f902b90d375d5b53d83730162f6894499bd756734b3c824e02aef6346d59530e86eff2012e9dac5a0712645690d893c9744bcbada48cdbc27e5b8718c5f606addc954b497e45d95549b40300aec7d29dee850d8d129d4edb7dabfd62511e9f72aff4d7b17c4707c3ea25b313509c5952542ab772c0cbd09b1146a471e2d98a6c141b48d38a285ef14b312df321d4e43d5ef4d7c291455e80a1"})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1200, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])

21:30:19 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0xa0103)

21:30:19 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080))
ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="fd3d1633d3091cfe56c771543aca8d57e4b4c8792bcb")
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x68e146a1)
write$cgroup_type(r3, &(0x7f0000000040), 0x9)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:30:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0xe8, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xe8}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_LABELS_MASK={0x8, 0x17, [0x1f]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20040090)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="302400004cfbde3f7e80d6a15b9f0cd93fd4b4353f7dc5eab30dc5eddfd850558e9aee51939c56095bb95e2f8f4f05000000983653b78e90946459f4e07e4dc2ce20dd2d3b46a17d8a43b8e4107b4605b265b8b1059ae7de49cb2eb5f50d0a3a4c9c0a4289a8b2bd3f0061e120fd6ccb49368cd5c98da209d72ad45d6eb0aa672192a1", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20044004)

21:30:19 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:30:19 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, 0x0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:30:19 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536"], 0x36)

[  940.369419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  940.384161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  940.398184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  940.408288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  940.417398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  940.438775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  940.459715] misc raw-gadget: fail, usb_gadget_register_driver returned -16
21:30:19 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, 0x0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  940.747021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  940.772368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  940.785955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:19 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 1)

21:30:19 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:30:19 executing program 2:
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=ANY=[@ANYBLOB="000000000802110000010802110000000802110000010000080211000001"], 0x1e)
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8, 0x80800)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}, 0x1c)

21:30:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0xe8, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xe8}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_LABELS_MASK={0x8, 0x17, [0x1f]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20040090)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="302400004cfbde3f7e80d6a15b9f0cd93fd4b4353f7dc5eab30dc5eddfd850558e9aee51939c56095bb95e2f8f4f05000000983653b78e90946459f4e07e4dc2ce20dd2d3b46a17d8a43b8e4107b4605b265b8b1059ae7de49cb2eb5f50d0a3a4c9c0a4289a8b2bd3f0061e120fd6ccb49368cd5c98da209d72ad45d6eb0aa672192a1", @ANYRES16=0x0, @ANYBLOB="010028bd7000fbdbdf251800000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20044004)

[  940.996742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.009909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.016859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.036754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  941.049804] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  941.137453] FAULT_INJECTION: forcing a failure.
[  941.137453] name failslab, interval 1, probability 0, space 0, times 1
[  941.138453] CPU: 1 UID: 0 PID: 17486 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[  941.138471] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  941.138480] Call Trace:
[  941.138485]  <TASK>
[  941.138490]  dump_stack_lvl+0xfa/0x120
[  941.138521]  should_fail_ex+0x4d7/0x5e0
[  941.138547]  should_failslab+0xc2/0x120
[  941.138564]  kmem_cache_alloc_lru_noprof+0x73/0x3c0
[  941.138588]  ? sock_alloc_inode+0x27/0x1d0
[  941.138610]  sock_alloc_inode+0x27/0x1d0
[  941.138626]  ? __pfx_sock_alloc_inode+0x10/0x10
[  941.138642]  alloc_inode+0x67/0x250
[  941.138660]  sock_alloc+0x40/0x270
[  941.138677]  __sock_create+0xc1/0x810
[  941.138700]  __sys_socket+0x145/0x260
[  941.138719]  ? __pfx___sys_socket+0x10/0x10
[  941.138737]  ? ksys_write+0x1a3/0x240
[  941.138751]  ? __pfx_ksys_write+0x10/0x10
[  941.138768]  __x64_sys_socket+0x73/0xb0
[  941.138788]  do_syscall_64+0xbf/0x360
[  941.138809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  941.138824] RIP: 0033:0x7f7ce2e32197
[  941.138835] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  941.138849] RSP: 002b:00007f7ce03a50c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029
[  941.138862] RAX: ffffffffffffffda RBX: 00007f7ce2f43f60 RCX: 00007f7ce2e32197
[  941.138871] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  941.138879] RBP: 00007f7ce03a61d0 R08: 0000000000000000 R09: 0000000000000000
[  941.138888] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001
[  941.138896] R13: 0000000000000036 R14: 00000000200002c0 R15: 0000000000022000
[  941.138914]  </TASK>
[  941.154277] socket: no more sockets
21:30:20 executing program 6:
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @empty}})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {0x5}, @broadcast, @device_a, @initial, {0x6, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[  941.261556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.278307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.287311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.292116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.324633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  941.329319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:32 executing program 6:
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @empty}})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {0x5}, @broadcast, @device_a, @initial, {0x6, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:30:32 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0xe8, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xe8}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_LABELS_MASK={0x8, 0x17, [0x1f]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20040090)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:30:32 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 2)

21:30:32 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @default, @random="3074cc8e8a4b", @broadcast}, 0x10)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xb, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x5}, @device_a, @device_b, @device_a, {0x4, 0x79}, @device_b}, {0x0, 0x0, 0x3, 0x0, 0x5}}, {@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x1}, {0x1}, @random="700c1acae261", @broadcast, @initial, {0x5, 0x7}}, {0x1, 0x1, 0x1, 0x1, 0x4}}}}, 0x3a)

21:30:32 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, 0x0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:30:32 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0xa0103)

21:30:32 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000))

21:30:32 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  953.929270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.956304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.979781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  953.986909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.007805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.033216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:33 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#B ./b3file0'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000480)={0x0, 0x0, 0x1c, 0x4, 0x18f, &(0x7f0000000080)="575fd6ba0051826a1024848ad4afdf8be5a085fb18d8bd177ad80f53df4e2a71bfcab45775632419518d04b99dc44f043adf213cca693b724f459dfd6942a47d44544846511270dda07eb072909f646eca657881ceed8e069576c5acf9eda808f764ce06bb6cb99b6f3ec46aa2b05228de48154b533bab50c692e315db6d75ea1fafc4ef3db3a17b00f8b127645d46ebde72ae9a8c28e59bd16441ba7138b7dd4b47807f15c236b1b1d540b99a77922df0ec14aff4d7188258934f8942c1e640fe63cca63c101bcfe4b329a0390249d768fdce9ca99a211b023211265d8989c0db966198a447c066ed4e86c3eeb372205614e7184fdc6afd7fefebfed31e13f97d5c8e636954f820b73c517f4aaa2374aa034c150357e9195446613ac160fa9862170f20c27c57672264d37cdb5f3293e324a39098032ee3621befab6986ec75a9024bad8239cdbbed0a22fea080bf7062518794c5932ac6e4f0cfe55553d5d30c9c386b340b5c12f312668cd64812a26f2d68f8f91cb65a810b5f11de18d0ba32882df48105f03c28d486dd3507fedacc1c2b4e7e25362b4d8f8d707a80d32ffd6b9419be75171c2ad60f09a2c866979387ebebe42078adb105f8cfdfc7dbf16e4f76be2c98e7018ee03cee9fae699af0fa757c67b4a228fcd0edab3d700397c9e5e2047b842c76ea030bc4e49dffe44b9d97bd2e8c3474816b05b0426b12a835027189e61375e2c3d4c7359f74992ad4f8296c60bdbe374d615e1c73c887182639b880bf2c84e94e24b5a5740543fb6f9e39a9a042bf3fc39d52084abb19e0135298df4c81662c032c30f4ce7f261d8054921651a016de67342fd19efb1117cf380c88e647fe3bea687aa49434deba7391985043f222d7ea026545da01b9d16c2484de5b1d3608e785c4fcd52d1d0a9954c4f75ebd783f82c6d2ef1fda85422f14627c60ef02d7a9fe011e0fdfee9e9576ec62074d7cac93f08208f64bd05dfb628da6579ebce8eb756f9b8031f0b939849bcafad7e8ae9471f5185b14998949b4e9b22f092fa320adf75208845ce20978806f2d601ffdda2bbe7cfc9c7b4b2bcc1cad7f653de649c224a027d599029549b16661ff95ce76125d09f785b4988da09e667d7c8ca2eb7702971fbda0ef15f5d6611be147871c5f4b132efdc51e91d036ddf160a8ad8e496040bcbcdc70f4fa6ae7bbb77fe61cee2a0313e178a47a0fb8fc6b4ac0cd1bb8b37a7cc170bb1b1b4e0fdfcf6152814ca23c048ecd41d183b25acd9a59453bbe7f41a50d959df610b41de28a019823d7302d83c1a3c60ce50247312c79654aa4c47370df4ae794b7a928108bb5e7c779e35671e4b2fb3bcee1216e645f6fbef97c595008ed3f8a645a87c30ef93df34b874eb450ec224266791ccfea1311831a4e2a205aef65a6750368d766347c32ad1d72d3dbb459"})
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r3, 0x0, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
ioctl$VT_SETMODE(r4, 0x5602, 0x0)

[  954.090214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.142027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:33 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:30:33 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)={0xe8, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_TUPLE_REPLY={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0xe8}}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:30:33 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x0, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  954.332459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:33 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 3)

[  954.384432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.439075] FAULT_INJECTION: forcing a failure.
[  954.439075] name failslab, interval 1, probability 0, space 0, times 0
[  954.440803] CPU: 1 UID: 0 PID: 17907 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[  954.440836] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  954.440849] Call Trace:
[  954.440857]  <TASK>
[  954.440866]  dump_stack_lvl+0xfa/0x120
[  954.440906]  should_fail_ex+0x4d7/0x5e0
[  954.440948]  ? security_inode_alloc+0x3e/0x130
[  954.440978]  should_failslab+0xc2/0x120
[  954.441005]  kmem_cache_alloc_noprof+0x5f/0x3d0
[  954.441045]  ? lockdep_init_map_type+0x4b/0x240
[  954.441080]  security_inode_alloc+0x3e/0x130
[  954.441111]  inode_init_always_gfp+0xc94/0xff0
[  954.441141]  alloc_inode+0x8d/0x250
[  954.441171]  sock_alloc+0x40/0x270
[  954.441202]  __sock_create+0xc1/0x810
[  954.441242]  __sys_socket+0x145/0x260
[  954.441276]  ? __pfx___sys_socket+0x10/0x10
[  954.441309]  ? ksys_write+0x1a3/0x240
[  954.441332]  ? __pfx_ksys_write+0x10/0x10
[  954.441362]  __x64_sys_socket+0x73/0xb0
[  954.441397]  do_syscall_64+0xbf/0x360
[  954.441434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  954.441459] RIP: 0033:0x7f7ce2e32197
[  954.441477] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  954.441508] RSP: 002b:00007f7ce03a50c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029
[  954.441532] RAX: ffffffffffffffda RBX: 00007f7ce2f43f60 RCX: 00007f7ce2e32197
[  954.441548] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  954.441562] RBP: 00007f7ce03a61d0 R08: 0000000000000000 R09: 0000000000000000
[  954.441576] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001
[  954.441590] R13: 0000000000000036 R14: 00000000200002c0 R15: 0000000000022000
[  954.441623]  </TASK>
[  954.468994] socket: no more sockets
21:30:33 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000c80)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x6}, @random="0a284016bc44", @broadcast, @device_b, {0xf, 0x92}}, @a_msdu=[{@device_a, @device_b, 0xee, "2a26bdce531293e7472bc9b027161ae81f3c739c5ba297e5c610f9357ea7e6a1f25c1588a858a4ac9e6e48ec6f5198cb5307b652d40bb3a22af6baf6291ceb852b8fa2bff42ffea8b5cf05810dce24a840651b8c564da7fd759b7a5ab52f7a7e139184678882daa9ae789a7bb48ebe2557a98bfd7209df207d11a621aa143c899a44eda8916d47d298d60e11858a8a908b14d303f1d9d69b20ef78194695d4e81f5bf8060818e5dede39059d369fd9e9a088c518892b2937d63cea26ce261370662f568c092394c073ed7eb6d51d69dc6436d5299999793caaaa83be49ff26743de337e1c4932ff9d87ae56dcafb"}, {@device_b, @device_b, 0x18, "0b77d995245c0265891df4145b9fbba1d737d3fc56393f2c"}, {@device_a, @device_a, 0x74, "a849cb163db6c13d19fb786366fa25f4a5a5338032a464e6e8c12c8d405e617f175a144995fa6d926bc6d5a3b1e8a6eba2f2c660f380d4cfb07d18025b141ae46930662397ec266902af976752411449491b11814aca2d44a9d479d76263c0604bd42e26d25b5342b09f658915a3fd9bc5a06ea8"}, {@broadcast, @device_b, 0xf7, "842536f9d148d908392a05e870464c0707623d1ebb178152326b9b2ff9dc8348a90de71f13247747e6dfdf65a7d566ee632f3c357604c239c8d3bb1b7c7069c4dde0ebf8de6ede15dd58c43cfda2f96abe6c076a6827e13733bfc60182188fb6ac3c46532bdb949f73dc4eb48bf313277196b3a668958693ad7e43f6a51b02bfa52179959a5a3234653fc31e78964d9a617c88dac0f0f60d89c0588f31f324d81e1b0573cef3657e9e3cd2e936d2d17a0e2c2566c9c5b4538a431e72d61129d69ffedca3674c3f0ac588c556038127356d5d28926d563cd2945624f1ebffba5049da61187a572f316857851da66cc42a70e4720ce10aa6"}, {@broadcast, @broadcast, 0x7a, "b3f7ee4f0eae7584f5966618a724fa296c18e9227bdf2d23ed335f33c8cdc5dd9f44f4bcd668be2b893c299298872785468481bd458741d5429ef55a776347ee2ab0109cdbc9b8e905c3e791725fb98e85508942ef870da3f2aa67b022456ccd6beacb03957a19eff3b172c34892caf25cef2bd79bb45f9ac0af"}, {@device_a, @device_a, 0x1000, "54bca3d8f205aa9c51dd086e703435435b7fd0443996e20ca064c16ea29b95964f289b2a0d0e4efb3eafdd59d272c0968228ca6d6082c89ec4bcce1ad9bb8274b3aeca01ca5289129330c4f39a54a24f964c6b3586d90488fa987ca7dfc6675ffd29ffd760749a23a02ce2ff859eab94dbb22818b5c8ac415b3e6efcd465e98929828d548557fd24d06e6022011688c63e1c0d1fbdc3f2c0971c7098882d799ba5cef91d950124d6f447075764c65660baeb46a2f38c2429a9d275d3573b13e35154caf058fa95a7eb01368e72248149bf9a30da507625f06db685ca645539c7c01dd57dd4af79e958557dfae392b60bb5b21a72f12e40b336307145e4dd5e778ca676a49938bebbc7831108965c9f347c2a23923b2141e012569f423743ef51c0cbe995221a81dbea0e43d74bfa5fd194f12105e97a15b8646691158d9138c2189ab881199dc81ccaa0516e8db60936ffa6c2f1726106307b28b758a0189898f4b14e2bdba8529a2255cab10c1f8986d793769a39ddfd74e39022ef8946f73ac5ced70037d0ce20104fa3ec9b1037d3c0fc540762b27c63ee9522b4ad4535fa9d4f46e3bfbca09528e35b7b5e11f3cf9e27f52f8af22ab7434b83daecbaea484bb9a597ecceed3ca30002a73cafc03189bd19f5603d6ca289f6a838cca36831c473921f295e249b75634cebe30b7a33f12d35bf9f508fa60c4589dc2eab607be855f70e2fc896ffdfc06c9ad77d6586fdd32af762dec000900a2207630dc0e622a6da332f17ebfaca181986d3a9a2a8df451c73d711a18e7eddb8ab876e40cb9fffdbed097ff52fa8581804d8d62402b57489e358b55128b68b4fce2e5c8a5ef3a37fb5f61dfd580d8397288cd65cf318c4f688c1bdb5f3ffe3c36d4ca2b6d9ae73be84a887d93c23c0eaf5614add7963903c3782ff6f93dcdf697da81d84eb828afd1f5aecc40f94b389bc094f94cc470985ccbdc3449a2ea58b3b41c570f0f89dfe56a42516cae3254b0978974ec5fb73d25b60990f497a12fdd60c2639eab316129f4c5e613d10e919aa4f546aa74dd19250e31c1fbcb7e5fbd5195ca62002ea4acac1c42684ed149deda3840c1a662ff7eb9a53f23fd25493c4d6eb60b6dbc7c383f1f786ab02c699952be5567f8153812aa9540858b04fe27ddc0d7163c6b5c3f02250fbf9e4fbd89b3e3e79f67eb972cd1b4a332b60199dfde1364db0a92b19221c177019abc893e52ace9106891635bad738fd10aeacc5cf6b7c271cbf015918a24399a00143bb0f68ac734acbd079a8ffbe403da2b5d57887990cf5131b1256d44b1b39332e4df633b1548491447b7080601c3f384c0c2ad5a1e8897d96346074105e66eff956985bcb4b48846f383833a199f95b0615d44f70d21494d273092c2fb91f981efe98e744f9f9e6081e7551c9c150d3339ec6ef854f08f693b5520d83b1489f136059e60c2c4547f819d5bdeb7b6acf71ee89a78ecc57d30cc6e4b988909640d4fbcf73961cea74f4bd23c05e9a0fa1abff653993161bf21472ab89cef07dbcfc3bc68956416290fc746340b2f7073f6dd806479eb9614b76c7a196b24912ebccb4757a47bd4b84d4227b01dc180124cecff7f3eab4b4ad634a64d2c232c729c83399780e250762db75312a43d2177db9ee427da878124aa7bd8228f4ede995bab9ae4eac9cc16a9dfe6a0c2673d2c583fc7c53bd10482710f9728d7eb82ac3d07499003195004d741ef61e29035d4ab366a33a11a4fabb42f3e0bf0cddbdb946fb761e2ce935a5d109f6099bc396fe019ba6b66c2f7b83e327786116d956035cefa815845197117c607215511ee0ed2a4ea11e57fd24e3464ebefad4b55e901a7a6721f653c7caa668277dc8d10ba83dab08f5ac80d00086930981229baaf9ba554ebaa33a63ec856455c7a98aa763b7d254233077434ddbc735276736e41bdc5a7b8b53b92090436162f588f21c677f918b61dbfd98134757147387881ac8bd63fadc4a6a36072e8ef4b9da1be2160b460fa7e971ecbc25cc9781253db61356552d81f79ff6cbbd74d9cc5b1f4e0333b79be59c5c45ec83c01b827c401f9b5869274ae5c4995e5dcbd0aa8b8f67d6899fe015284d5502a78cc039b7ca05a005c2cf4fad5c6fca34ebf29f004a80728fbe83102a22fd51b727de4125d5f6c44cf8ce580bf1c1bfff53a8d97e5611a30f86c54afd0dcf2d46ddd48374b80dd944c2aa6c6a9f81941b7e825f93cd1164a5eecad7f30be8993eaf945636e76929a7d6934defa566d81efce5d343726edd978045d40aab31f7a2d771d979f12abac310b8614f75be3c67b08521a2d105550966020957ab8d2d57271aea851e33f1624e04217dc5728cd06a18730d9629c5c7239d8ef2655c4a7ad917c2a958d7df52d2cf66e84c01e830880d4a782d7c23ec5d9dcc3a59ea6c935e0a8c166e0b1ab8a932e2a2e7e1190fffc1f79a7e65ed6a505c12ff9972fda9c29d93dd52b82f092318ee3b2faf3177d8b7040ccf48be8f483f78c7c0a61688b613e78de9e03b2b3e0d2faceb8d9b4f223305b4f79a7ac1c84c8c685318d1b971e12791a819e217a887f6e0fd5b434b3cfbfe86d203c140e7fdbb11645bc487fc3e8f3d508757601b0df7c029b1baa335b83019cde66ac44d8cff7c6a294a00975dfcac9a76cbcd4096c925a1bdad5715edc3f759df5509652f0f5e7459058a25ab59d7016120d07087f95d1f7533957ea5e3bb90c7709c6a44b1a24ec6f820daec3a0eb88fe41b16de40c85652e1afcfa1c04d51bb8eb1a6f500dd2c99ddb066b074805d48597e68e8f1855ae92ecef654937e32d58aac430a0de03afb287124724880b5462251652ca77c36a1a08b9d7c78aec069c47519ca025f27ecd5fe0f5add42c2e29e14bdc93717be8c638b61836f07dbec14f2c723a98bf1d8105b6ba5b045d392f3e4e813315102b2769c8a1b6cb7f97fa281f7beaf44360002d00c76b2c88b7208830f36aa18802f8faf7a9c3ed9bdc31615e32b3719be7a68e18176de051091326293a697f13e2a289ea970dc52be3d8551928a93d6f5cf048a2c98617b05322318b4d29aafe00875830c843e26e866070f9a487b0546b9b4e229d5dbcb25b96e472fb734570927e5f406ad30ac7d95266560eae9ecfa4df5b821a91ab2780b7e9f6a0844759c68018d3588524686b352c08171409c12874156e8e1d9b2b12337d9b06488d352c7cb93899780dfaa7b0d46eef31f0dd8801b7aa36026d0869fbb96457fb24e61101d5e0b59d30abee6cffcb2890490022a20c296ed99dd12f6a4bd25a9c5916d0be7101d633f2faac1fd4341fb13cac3005b393a1ef9bf6f2889c59ae5f9dff46777db87118282104a0251c388fd6abe97b746c3622927baf8ee552312d723a75aca8b15872bd6a08b52fbae1f0feb090fe49980d002846ba0552ed8896a9131381b41862a1f337ec6730a156fe3ff0aa49072c19bc18fad40c6221c9109a4b6005cea9b59eea9b18f7ebcd42f349f8053287c520259ca23486366fb29108baaa7a40aa6e4a07491cd15e4cf7a66b8cfa1f326398f6054a7a683c3477acf6012451cc0fbcb9c6a7a22c0a21e6207d6994be7a57fc3a6386e8e9623242fbc7560ba30eb1c64ae778c1451628b455ddfe83ec0840e7fd93153186537e5a30e5e7930f91616296ccbb29ca2e8c83389008d957c0c8366e3f575cd136270e877496c648bf9b5b2ccb929349ea28f9c4521ccc966863565534564af5fbf1bfa9fbcf7222219c932690514ceebb578cd9ec9fcb8b53530c6ccff68936f3b0fe070129d80ac6fb5ec87fb040d224ded88cda091340927b739f3aaa6874a8341bf87642e9a540a0eff757f52c456aa4e54abc71f1ee2de61795fff3ae4f211626c2072c9a8f2d1ec2f541707a99af6f18e00055aae32d1a2085fa6a7b4e5c9b6692947c04424ffab78b548baaeb51e0bc37f1619c6284695d697c123e86af05952b910fe7e40ed52b07023ce95f3f60e0d1cb6c355735194361727830bb4bc6ad0bbf947e9ccf60c61c65fe4a5d8e6a9253f21e6bb86e1f7f0dc1eefea76534d5006dbc7582806a303458d70831401568ff550ca87de2f59db835259e5cbe32242eaa631e92771df0870122b34ac11481f8aa1e617e4b806630f7bfbb98c105f3e5e0bd5e4c8d39870f577c166d7b03622aa3312f8b9e68daeacf7238dd3bc33e768c108080f90393abb04f5a9d90d0b3f2a46fbe6e0176c38273077411979bd26785221e9a9f8658c4fff8a8ddfa13072572a82ae4272a1efb4bfb85dd7737f5b20313e75f0b8fcc13bde6c1abffa39996933eb50b6e69b6d07638981d1d1af1468351775b1c4a0847f4851a2a53e208ef1396426fb93f0ac7a936c31fcef1f1e98c65e685f193535aaa8f498ef8336d1888a9a3a0f05856cb56e056868206078855166037b81ad945a5641af8c94b55426a027affea8c9493bb31c06a738311205550bfa73fa9408520f67aa4756297f21d2e5f26d36f1b839c32a906b91b4577e04d2e02dfbe2732fc2189da15444e93eeba151f04b397b656b45d4c94798ae6c17979ef16e985968d52bc22f62587808348b6e8f45f68d7f20b45468f408abfb21681effaa4ad63d3bff63f792465bef740ad71edabe328cb893f9c9ef81a184f4ab2e1df75f28eab8cddaaac5fc4dfcb166479da7f1ef6ce266b69d00bac1fe97cd405bc5e511ec5a28df2b1f265bdc8754f954123eff83ba2c44b308aa4100bbe256f7e8c244c4823c0628ed7d2024f3759039022195db515dda62a5ed5f1849cfbf3aba7e3bb56f1dbb8674e3e08f9e188f49105844567e3fab9fe6e66e64251f679d51593a6d094810fcb5464dc8c9ab7e4c0731ab2fd51b1b66b227e47969bcb2e87a97b7181e69037614b6f37864c058c125ebbf921eac8ef1eea44bc50644ca57934e7e09d5ee59d51fd78eff379e76cd4b491cacc1baf6a551a5431f3a1db3e06e4d669fab546066b113924ce2394dd6060d595138f48b7357d1a567c458d2abb74ab4aa4d1f6baa00112cd496ed6414aaa60b200e45a097ddac640e04ba75d8d6e2acf4628b3fc4a940e408f97dae58c8fd0d41649c4259e8459eadfd71fef1ba9f8eff0e480ce6e47a026b826924c998d776047ddf1479a7499e516268654935c45d73486c1dd49c3f5693049985a5d627869e3ef1ee8c36884c16a614c953e995d88da820e4e9bf75d8a8c94b1afa8dfdd3cdd93b44ff1cd4df1426320a98813ddc53246e0a9f9d83af6f13a3cbb86de74c251e86d223d78d3c45df673bda6fb94515d3cd3922a643cbebecb5427221dd893125dc96920731dde40a32117161549c2c146b024dced1c616042d8be9d127872aca3cbff11b0892971fc26748b9793c1c69d696e0b84010910816481ee432af1fef21e8b343ae7e436c34dfd3ad040ee14bd07403f055b598997349bace6361cda9b7f333cc543b0670177d59a29e3a4840c793d59f443512b8d58fd8b0ec2b47920811fb6785fff617b1871c28c1c12ed1578ad975f4464fb8aa050d3a25313fdaff091d8f5d3dee6145f54b8be714e0c71e1c0eb39164d36aa069db92e91993baecd3ed940075938a1f4202bcd1c2560adf63327d3cf9d289b76c0dba17182eb1fed1b08dfd9cf93ed3de8636a89dbc42d90d4607b81cdb5d6eb14c32b40fc3557e6d200915a8f00a535293cc5b4a937a35d94bd954faa78f887e19a30c84724730d2b474b34a30d2b6150680893fa693cdb3d3a80e81f6577784"}, {@device_a, @broadcast, 0x5b, "c9f7c88484030516d5d26edc6c633c850e49f7078ad1adb5e2e3022b1dc9b1cf9c4276c5a93375f0b64c53b80835030d21091da5475fa11d3fbdee8366fcf0733dcc3aeaa645abfa6b8b80462264977866feb2110d945a95e47bc5"}, {@broadcast, @device_b, 0xcf, "7372ef6786da034a0a2d82dcefe71a93ca19c3b35d7465376c109dbd489829787c09770554513f62446891237a20e827dbc7d2b867966cf8fdafe9dbd933d53f351e590b7c1b8e5c3aef00a1d2178b619aced36defe491a192c478b4aebc47dcad316643ce53cec3f026c29be10b42b8e33a672d95e1bd713b254edf919f2924cebf35f520b86821d99a2100567f60a8e151d06f3824225dd39e6e83edcdaf5e2d66f18a61e454605e9352f445798ede2902196ec750eef1cc184590baf6956161a4dcfe3968b6b7e8f454647fb9f6"}, {@broadcast, @broadcast, 0x96, "7049791d423625df9060cd49e1fa38add9f7c0dfa606a8fca318594ad3acf32ab6d6b411b3a96579d18386994eb1f6c08cd8c7cac34f7336d2162da0e776dfbd3b739dbe54e8514051b5c34abe4d9007997ad64fe969405c82e06a3f10de17498964f838d4404110a5687b30edc23a3d678d83a984cc119c9b61a797c0f8cfffc26b470640fc3bc703576560a4ec62cb2dd2f2e6880f"}, {@device_a, @device_b, 0x1000, "0efaca3f19d5332738635a025584fa9efca4b727fc2e0b7548917e270ab153f5330331f2b232198af2d845a8db176fad12a6b2025d6cd41d6031b124a52c8a89f1373aacf8427dc0b1cf0fdf84a8553de35d962323847041f9451eac11eb05890f973af0b553330f4540660df771032c3df60e5304f8e1a01c303348b7ae1f36f49bfcb4a3472fd04e3864333a2008fee151125831f630ccac867f9016c8b55791d091563bc76d42baaaccee6c3de8a2b26f16ad1f13322b2aea110cf187445ed6cc686394f0a8b6ba943d6cd03c4cf61e367afb855cf584cf83b91b63a6a71ece79e2ffd0ce98fc71ff6fb690467e6bd41a86277eaa030d7574891dec23e297227e24574ad631643f038446579cc53a191872cf936b15956ca1f57d7c756d2279c3766f8f929b0472f87a59013d87922b525d3c6ecdc176c5e1d8e77af3a2d147e07a20f141fd76b025aa66d361746637239e7e7b4c1041b1d892abc18fea0d211dc4c4b90441e17d1e93fe3db1152957cfcd30106dbb55e8e062676477d1ac0d8fc67d8c291b3e73ba9fb736845d7d645a8c8716889b902fe18a5879b3afe727e46a812082e52199c5cc0f4b0c5d17b835ac8f90a47e252aaeff306e2533adde51ff5c448f5cac486c2037ec81e711a8b7c7a0116ee76996619ae5697355a640f1e36d263b33a995832d1e9435292eb81d2bd8bf5da75fc7344ee2ed635cac0bbc9066e5b91da0cbc95dda5d3ed8a5e1e0ccb55fe35107b3296cc4a2da7d307a2af789191dcf0dcd41e2378e22dde9526786b1adf61f1faef7c48cf69c9f2f29eb4b2d3c3038087c05de13ae7d4a0831eccddceb1f14f05c3834ae0295fe83610162b754ae7449a40bdae72fbc2ee7b2d845c1f2c47a8a72fb469eb090a6492d89c17f632af8ad2d2d883d7ed424e453c09123ea61477b7025de44e3c10e4fb59e0785c993484d603ec10f00cff09244be088e0590c3df67b771ddfb50956daff22562e2c4b3c46691bcf7a1725270a4eca50455252f79dd7cb5d7e50bb8dbada46c6be8413f35a1fa94d506727137f7524914645608df30151443e74a8cbbff497466a02d9f620a9323bb1fd5050f1c2269af7918e5488addd64e62a19dae724a4460a5079a0c9cf1963c01efd09b66f4257ce50fa29f91865c45dd3641ac633567577f45f3911e1dad55d375087349af13c9d73f3dae7d0522ca3690156d86564317b21c8454f3e07e8c4ac8d0179cd3d1f6236944e0ea9988575d9ddea8aa2948d4538dc8ed82ed5448dc3722d29c8ac52f4d24a0bd8f0614023121a56cc5cde08364e7d7f7a11a8bb1a658284672531d82d1dad5f925f2ea829febdd12b00982c193467140fefab6ae8e1179ed3c7c2336cf9e199ba4c8f8216e731e5f006a69312e7064a3337d33ec5c42891c36392b82f383d16e172c530e88b559991c62d36a964a78a1a5fc245f4f456244f1acd9040a1f53c91009c491e15283e3611c7fae3ed6c42eb5ab14c2d049b3456639ea56cf8c71316d36d7ffb05795118d4a624cb819b93722bea5f17a0765f9ca8e0e26b427a5bac56d009bb82f211430d915f983f5e00878dae080080f36f74e520ba2fb0424387d60a42166c8f84a42935dea14f2771222ccd0177a3b86310f31daf6cb73ad77e447794be57b664cbee7b8025f862d1dc26d19c3807c29d75892a9cca279d83330d5c88e47a4db8947d50b71314524790400da1a3ecdd28feaf6ca75850dd1e43b4499663f355aa676fefc8661c74c46c92d0677f593577120918d549375ecd4c812c217ad6b913fbb3dbff5163cd131add83b54dd79489e5724f0d9fa5a29df5916da20afe5b21237170ebcc8bee3ba5bcd01660433c327d00721d4d46e4fa2aa6a82f9ce882561ead2a5d3970ec2132c020cdd72228e8c64d75fc6a3c0f8e94c37018c3c06c364433ef5af545389af4ee9282070be3f3e369a898f11683d6be64e294222a5bda84192b3b0aa9510c029139da61037645f3f671042fab69208987e12ae4dbbe8ea6676885a3cbe04cc95929c4cc0edefb0fcd2b090419d34aa22e538505496e9b02e9caa5ce927cdcc13af61135618bb785d18cb2edb75260e138d5738b71d757db833ca1e034efb53d1908d759e6108f6313b2e49ab0184db4cde2f37989b001c3e0015f23c6a6c8dee54c4686fd6b10493d8bf90d0eb36f624975ada3fba8cf8a7dae683206b9a27da0fc4683128d2ef8f5a4ede5ae159888353ee6fd92293c3913a394f4538118220dd57df3c57a55b9b16559856697dd93f7f119592cbbbabee3841f5101b629de6719651d19e4bb4111c4200cea81d9ab9137b0973f3a1a05ab548c765d696f216fa11f98cd6eb24e22ce9833d1bc77ef701134efda649f1a9a1b4c85bb3eeb4c73e708cb5b3b5b278749d3c81e179ca39952d557ce2011f8912cb338622a6ad850366405f8a8d3703393ea5600d5f4a2db8d1c8db4f62fd0bba03e021528748dbe4a5d2733e4e84ae93299691b0c6df9a4bdc72f104aec6ddea3e8ecfd81e474966a1b0b3c27358afe8cdb86b149d9d63b7e30b0c4b5ff8d99f4af1d5f4653bf7feb199a7124977ef724f6c91f150d66c7476039e8ccf49ed8be1afa5a72823b589cae4033194b3551f8eccc4310dda94e2f4054ace9761985a0b6cd4279b2ab17ad3ee0fda6a13d0de113b503afbbbb4c092463684b082cc1fd90bbeb2627867ba797f3d361b72a87b8a1c36b478415d99f4df82b138d5f787ff8192ff2ef38103de85708c32adc908675789549d3aecc8caac937817f8f06d24f28f0a91c7b362b69e13bc2138b912a1dc9cc38d8cfbaf4589e61d33cecab7eae83b71cd895eca5fe10040aea2651bfdfd97b35b20c6ed92f38d5c28b4fb36ed6654967c5b7237989d5fe1b4aa988e7a7f2b0483412d81b7f6469c72a1f45944b6df39e1b14cc4ca3923c8c3bd11a4cd2666fc0378c84e3669b61c8f02aab99052bb8c442267faea1465a68201851bd58cb12a837501e5c1637f034ed3b46a11ca3631bffc2e584a64dbfbd22a3958eadc570b1ebfc20c5512a89bd312eeb66231a7ea62d6cb7929c36f09733fdd1bfd34ec183ae6cb562a53a2d0faacace1cbcf554737981eb5783136270cd3eb4c2056eb0fd86d72929871512c3720e50afe7872ebf283ac821a9c4bdf2d2815336df29bada54bda2e6c2992b55c7bee02da06b233b6a3860da8d160d24115fab33a270403efc58b72185c88493158431ae459b18568225e377a47a6430ea02999726f47cd61b5f1a08c157f61013ebc64c200a1d1b1084494c21781d4d475db33ffa5c33f840e6a1d8da68986c6cf771585ef78ed44de5c6e21aaa704a13d96d4502202816cdf6d436cdb19146c60ebc3aaa564d072ccdba2957525f35cfebb81227dded4ce22b3126457b03bf4abc98449c0d0bc4615be73a6fc24f212c3843d23f322f8c1ce4a417dc74f3e5261cbbecaa3db153bef6f963a2d84368350cb3aad8f016221cc7b13bac2ffce88a52df7b8f57e863a8ae84580a74cbc4008fff7464eb26ea6a6443ec85021fc62fa48ee3e2ca4fd250c0553aeaa5fad2704f7781f10bb2b74143c7bec2b8398a8389dfa35cc2633f671c869f889e9baf7fa61ab716dad4ebf54eb29e40ec0be3bff0e4d8b027ad9941418a73fa0d1a099bb515d405ec42f5dadb78a1da934b4a29e2cc51c3b1791c9e2d9caff8de637292ceb74131ca3d40e0bccee61af06cfb99d74833aa4b97edddf1706e1ccbdcebe05ee6542d5a9e811a04e9299dc1298945158003802b6c0861be67e4b882073f8065097aab0bcd3350f64f5dc5c19b4f5bc7d1590de7f671a29c83456e26ed23fd77da14b7bce5e8a3cd431faba31d30a38badd04e3c0c05f5024c67896bed2f8c2fe18d310009c45fc973d58294220ce2ebe6128ee391444711f6d013759943c3f1545232b44dfe3f16330a6507a5a5ad3e5c2487558f2c493cab5ac23528f6b9385bd5020dcffa1680361db4ab521dbdc055f24e458a0d26cd606c62fedeee751327c4026b01f246f4385d0d1552e1c88bd2b64f3927bd2e4ba605c7d7b76c99d5267ed213e06575455f22787d718906c46cfcdc4a10bf76c42473607f21570e236e7f382721a34ce7fa41b612dbe0d7b69b166e4a65bf0563410a91ab0e60e6f8457a6fc413bcef1387425d50fe643701bd687239e01b2917d859f8461bbf18b91cd389360ec47886d351070f7db332a9a2746af4b412b65df6aa720ad8ed1c6b9dd5be3b88fe21262891d28d1b37ec24748d9a3cd46b203703d3a7d1c54e3526ce2554be6fae38eb39c355176acf607fee0e9fe407fce53889d5e2b87feab260d935249d77abf3fa78478acf1db35998b3eb2cea616898aae84082706f529dad34caed652ff4716aa9f56e72b4fe92f4071a8e524d52c2ac3f12f307f7c321400dd3c201f06900f60a68bdf1623af67978734135435781fbe4d7b1042ce13f118b73d7b12615fe3962656f7c62e147e30c2ea6d5b072f4d76bf44ec01c7795ed8aa0f2b140409a8e152badece53853b35a193bd8d0a1ea7bb38010c0d38132ee42ef22af8ac0c7f80de35a6541a58650fcb71f1113dcb5f8e4e01cd3fb5e02190ddfdf0975de179f87847b9b841df29c6f1df12a33eaac991ae113e9ccab9cf5af1f89577025517f84c9a543112116068fcc0d4b30024acc30a7fa324b58374a8495bb75dcbbba285825890fe913665031277120a36cae305201b367ee99e34b15e4fb26bec1320c707ae4b47d423e83bfc3ae7eb97706784acd7b07c678ffe75639decc408c78f5a6a41a98bd94f18d749529413e39a5ac40cc9de6f81b73424e7a71012f59d7c80999730311daa19503c9c951ce4cd36e95c5644e5ad7f47fa71e99a8d7f7672d24690991b1e4f378a3d9da1a6e7e9c3093dcf365498f1d7a222c2d2c4e45f7399e2c0d8249da559fdb2f29435ef194fc6b6e627bcc4fd8e4c024ee30c460b4b04aaaf2f8c4c304ad2f7c2a44c88b41589a292f8a0c7b164816ded214d722fe33db6832024df3ad5a5e11597962a94d39d98d1fc0f239da32da18f20c1fb8891e1d37a777e57e01d9beff9a7f888319a0d2ca2051ed058f0435ff52fa1ec492d6d2348edeafcace57c8a021cf91df0835e0284cba02b2790ca904821e2cf262403b9fe4d5c726f8dde5f62de6b935c4f2db995c9a836ff5dac29922a0fd22241de3cb8bbbaa51b4373d7b64e279c7f4c0189c09e265af77e65ff13ee9463fb78d640438194ceddc0b9a3570d70b9aa396401770f164e335015c65dbca837f6496a951ce55903ff885ed73516073c041dc115f202a7388ebd113b2e05f595d3af751dadac55d0432e513670a9ea3b93820a4897b1f706aa09f4e222d6a8553195684480604b2502e605152a7b2b6b19ea1b3fc39059380e1f03970b0d43a3a914b2d23f25166788ac6f9f92a15d8d5b17dfe3a1b92c5f7970fb99df9105da01291254e65b47fdf91ee12271996e4bb6dbdc7f61e5b7a3cb06d775207a1f4f35e9d0f956b6ddb28b8f8c8a65fb22067be92e835c2202e0e618d73a16bfa92635e1d28549945ade9c036f233b9c61d9b62861fa7337a558d9cda2c28a213a3bbd4753afd408724a43337ba0e6fe8505ca7f24adf1bfe923cd5223568f1c16374805a3a5ab02e966670a99675b71a04391bb5634738c671138247006e8480ca5b885b6594624205251dffaadd04aeac3ccbd0ccb619359d5183e9f3ad1fd2961ad66c99be2b2cf463d35"}]}, 0x2560)
syz_80211_inject_frame(&(0x7f0000000240)=@broadcast, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @broadcast, {}, @device_b}}, 0x1e)

21:30:33 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(0xffffffffffffffff, r1, 0x0, 0xa0103)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0xa0103)

21:30:33 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:30:33 executing program 6:
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @empty}})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {0x5}, @broadcast, @device_a, @initial, {0x6, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[  954.649575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.671271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.700130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.713151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.752304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:33 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  954.784241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.815984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:33 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x0, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:30:34 executing program 4:
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))

21:30:34 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 4)

[  955.006540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  955.103761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  964.393842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  964.401742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  964.406141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:43 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 5)

21:30:43 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0xa0103)

21:30:43 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x4d0100, 0x40)
ioctl$VT_SETMODE(r1, 0x5602, 0x0)

21:30:43 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:30:43 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x6, 0x1, 0x0, 0x0, 0x1}, {}, @random="8723f9617b8b", @broadcast, @broadcast, {0x3, 0x4}}, @random="22d281a1f566d97a55b8301cab27f7ab975dbda8fadb7ae3fe8207d0e20f47dac1430e758a6764b2cedf626553dd89ab07234baae75d33513e5658a4de833f2bbe1b4ad87b743399da0dc4c3c2c9cdac29ce3823fa4d3259b1abb18534faaf728775be396e5339e8c313332c916a43c28570f80fef2d318254abfb27550fe58cf2b90e77f76c7f18d0b7de0d9c65ade53ba2fd504df5613695d1e1f64741b6d49a116840abf800039752fca54f2d00b4dc84d0ef1dd4d9f8c65b7d3edeef2a65a8a0c9bfdfbf20bdbba34700fb21d6d00d678d78454fcc2d42470c1f676dda7bebe3a758400a33b0679d2e8a93e6814b4e58cf4d0598ac25df6790b64b6f2a25884a3355f0f9bed3127c08f2fb505a4dc7d4a4c1c70cce6227c458c3bd08b452c277415e62273af354f91be762e7ea4904d397f4d1d2645ed1b002d4fec1293f86e3a2ad909e01ff5716cb781ffdd274148f15a18e5826be2967972abfe4cf499558519545fd2e197188e6c844dd21e5545afa07cdc932d5ec33376fc8f344f9ebe76a6c4695860a4ff66d8548904ba2d34669e27f69b7c24b4c57c50c226a77656050ee1037192e89b82770125e79ffd93eb71443945f670d30ba5716ef70916f32b8437b85e5111d36626587ea94e3ea5ff90fe4ff12719cb551184ae6e4a28e1933ef0b9f24e46be281dd1d91ce88e1b57e8a0a105171e6ae30b35351789a87218f4922ffd6a9cbe82f78a4acfb09d955274c3d1ff750dfe4723433f8ad4cbd926d9ebdb020c538d682da62a5728cb18406548c6884e43fbcb758137ca0dad5d079e47bf4cbc6da5d8046930a5f58341843433355917a703f04d730c3b1f54696300a0767d37c775a834251b69067a652004c71c0e02c9b7959c8d88cb8e22862d0856f327c00b54f988a4c529e4c1d369151ca7ae6c560a79b4b0987bb09bd1d1ee557b30392cf100f198edace94459d834a3c4290cada3b3e5b6bc2d00175977826677d7d227a405d4cc25ab1f5026842a871ad073abc185eb7756c76879df8d7f07c6317e3287bc3ee7df8cc20458b6981e46dd6bab64cd8c91fd465699a4af629830b13e9c4e2537fe0"}, 0x325)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:30:43 executing program 4:
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))

21:30:43 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x0, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:30:43 executing program 6:
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @empty}})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {0x5}, @broadcast, @device_a, @initial, {0x6, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)

21:30:43 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xc1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x68e146a1)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0xffc1, 0x4a}, {0x3, 0xad}]})
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r3, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000080))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:30:43 executing program 4:
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))

[  964.471271] FAULT_INJECTION: forcing a failure.
[  964.471271] name failslab, interval 1, probability 0, space 0, times 0
[  964.472367] CPU: 1 UID: 0 PID: 18342 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[  964.472384] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  964.472393] Call Trace:
[  964.472397]  <TASK>
[  964.472402]  dump_stack_lvl+0xfa/0x120
[  964.472428]  should_fail_ex+0x4d7/0x5e0
[  964.472453]  ? sk_prot_alloc+0x157/0x280
[  964.472471]  should_failslab+0xc2/0x120
[  964.472487]  __kmalloc_noprof+0xb4/0x4b0
[  964.472512]  ? do_raw_spin_lock+0x123/0x260
[  964.472533]  sk_prot_alloc+0x157/0x280
[  964.472551]  sk_alloc+0x34/0xbd0
[  964.472564]  ? __pfx_genl_release+0x10/0x10
[  964.472580]  __netlink_create+0x5d/0x280
[  964.472599]  ? __wake_up+0x3f/0x60
[  964.472615]  netlink_create+0x3ad/0x620
[  964.472636]  ? __pfx_genl_bind+0x10/0x10
[  964.472649]  ? __pfx_genl_unbind+0x10/0x10
[  964.472665]  __sock_create+0x369/0x810
[  964.472687]  __sys_socket+0x145/0x260
[  964.472705]  ? __pfx___sys_socket+0x10/0x10
[  964.472722]  ? ksys_write+0x1a3/0x240
[  964.472736]  ? __pfx_ksys_write+0x10/0x10
[  964.472752]  __x64_sys_socket+0x73/0xb0
[  964.472771]  do_syscall_64+0xbf/0x360
[  964.472792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  964.472806] RIP: 0033:0x7f7ce2e32197
[  964.472816] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  964.472828] RSP: 002b:00007f7ce03a50c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029
[  964.472841] RAX: ffffffffffffffda RBX: 00007f7ce2f43f60 RCX: 00007f7ce2e32197
[  964.472850] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  964.472858] RBP: 00007f7ce03a61d0 R08: 0000000000000000 R09: 0000000000000000
[  964.472865] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001
[  964.472873] R13: 0000000000000036 R14: 00000000200002c0 R15: 0000000000022000
[  964.472891]  </TASK>
[  964.543424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  964.582455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  964.607767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  964.619628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  964.932375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  964.936378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:54 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))

21:30:54 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:30:54 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@ctrl_frame=@cts={{}, {0x7}}, 0xa)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000300)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x1}, {}, @initial, @device_b, @device_a, {0x4}}, {0x3, 0x1, 0x0, 0x0, 0x5}}, {@type01={{0x0, 0x2, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x80}, @device_b, @initial, @from_mac, {0x2, 0x3}}, {0x7, 0x0, 0x3, 0x1, 0x5}}}, @random="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"}, 0x6b0)

21:30:54 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 6)

21:30:54 executing program 6:
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @empty}})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {0x5}, @broadcast, @device_a, @initial, {0x6, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)

21:30:54 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0xa0103)

21:30:54 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:30:54 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000b80)={<r1=>0x0}, &(0x7f0000000bc0)=0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, <r5=>0x0}, &(0x7f0000000040)=0x5)
setuid(r5)
r6 = fork()
ptrace(0x10, r6)
wait4(r6, 0x0, 0x80000000, &(0x7f0000000240))
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000c00)=<r7=>0x0)
stat(&(0x7f0000000d80)='./file0\x00', &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = fork()
ptrace(0x10, r9)
wait4(r9, 0x0, 0x80000000, &(0x7f0000000240))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc, &(0x7f0000000b00)=[{&(0x7f0000000fc0)={0x31c, 0x11, 0x800, 0x70bd2d, 0x25dfdbff, "", [@generic="e47d544e13e0476847123e1167cf6fbee957dcc733424d3000a921e70d7a70bd0f35e7524f97940654fa1dd1a1573aa65e44edbd9589c0b3c3915313a0a42b4febe3d9f8273ddde057d26879d9f1e33357b86d1e42a5d428a00d261f1ccf813ae64156ab3dab597d248ed7126f428a85a70246a07a0b4790585c97f37149bab1e6d7ebf91ca098818e242d", @generic="a5c64c23b4cea794a18939d4806f95997a866b7fd003c59da50cb733f1ee37c09193427a231d771425d54a5f451576a1c23f8292ea1eae114a86fe380c9ca7447b5612cc94379a31c97996892d0193a8e2054a577c24319d445e0278144f6b96d6a52d20742f5f120b60084cec8ef805a5d94116aa76aa0ed094b8aca91d445d14e471b776f2a5d02c43ab4fa240322bc389181f3e44aafcd2ba570039ecbfaac97fe2ec7b7046264b", @nested={0x17a, 0x75, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid}, @typed={0x4, 0x6e}, @typed={0x4, 0x72}, @generic="38b30efe1e46190b3f78fe880c9588c6b5477ad2fbe9573f32a45d4e238543d646b1ab47822ec3d6b7771860ac9a99a662067a15ee26c3102b663c9668a088f225b5f5d936f0a4ae2fbb1e05e3dba36ac5ec3c5715122cfe22ff8792c94b45d4", @typed={0xc, 0x16, 0x0, 0x0, @u64=0x7}, @typed={0x5, 0x5f, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x1d, 0x0, 0x0, @pid}, @generic="c8a402cef2541b67575a327fdb704cf29b7b1c05061a25006f0a6248221e2975e064db5ff711d127c4e53361d93b158dd0eeb3b9292c52ada9864e2c78f78ed39739803c0ff019a15e349bb7c59515b513f4d258580edd718993549e5efe15d87c8331c90eec7884b16a29b45953c0be9fb6366e898736973930452ebb06081a18ae468213e3239b39057c5103355bf0e6a1131014d681f6f6554c9122a04eab11b2b9ded003d900391fed16b0e855f8972fdd5920d8341605ac74576b8d79fffa163cee51ace1b63c02f781ca397b939144d19623edb9e5e4d0cdb03af786be8ce771ff4c254f2ff3b3"]}, @typed={0x8, 0x8f, 0x0, 0x0, @u32=0xffff}, @nested={0x54, 0x3b, 0x0, 0x1, [@generic="6e2e0e5beb3409e51df09db99c16cab42deb10c1806f557dc0f464d02031d2ad62f4dc8a706a0861fa8662e3c7a1cadf371d591a56d1a321844c4b2d8444e3c15a071e78a2c881a7118bdf32f36c21c7"]}]}, 0x31c}, {&(0x7f0000000600)={0xec, 0x1e, 0x200, 0x70bd27, 0x25dfdbfc, "", [@generic="d8c7e5642b62e01d101590619e8e888ad1d6fdb103bd1743caf401273455cb856e73553027d6550fba9ac6fac370b820c03ed34640c07269a221cb5bd57b085767b142cbc7eedc3fb7e8a9815aa5104e1e282fd7adb0d89d39b18cf3ac163510d9dcd808ef84202443942aa93592e88ba33277ba80dc41ec2cd7545eb8980ea0e01c2050c2be31bbbfe578bd539a7ab3128b88ef24075da17289e521d5901e9c77", @generic="482ec9aa69c2d18abd3611b44e8f7b9c10c9c74a07096a14a4f7eba2cd41baaa47b7c43eb0db8e4d9e2d96aa27b44459", @typed={0x8, 0x85, 0x0, 0x0, @fd}]}, 0xec}, {&(0x7f0000000700)={0x3ec, 0x14, 0x100, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0x44, 0x0, 0x0, @fd}, @nested={0x1c, 0x26, 0x0, 0x1, [@typed={0x4, 0x63}, @typed={0x14, 0x14, 0x0, 0x0, @binary="79ba8f3e28f35c146cc8c8104db71abe"}]}, @generic="9e3b19cbabdfaa3f19c76cbe2601d57dfcf9d5aa556dbf831d4f723496eeb7d1d0857233d64739bc1be4e4aee140dd3cd0845db55ee7ceda5236a7159751ca7d4c6c7cd1ac0d77a156efe671af89e12620f0e032fc8be6679d9a83d78663e0b8b01d4cf01b53a0c7dafdceea036130d48e118ecaece85b70e517a54084d4ce53605c405855c72f57bfa4006ff899fcfaf252eddf3c7bcf86ffbf453251bcd9591b837b20941bb01a07628146351f956ecfa3e9ae9d5cca3e9f93919413b2750947151cf94e78f73341d8fc409e9ce614a9122db5909712", @typed={0x8, 0x17, 0x0, 0x0, @uid}, @nested={0x1d4, 0x39, 0x0, 0x1, [@generic="1ef255d2436e4a14728d88f4d178f5a9c26476d3e6cc78f5a4a4f1669eb3b79d3717c2739f9ee442b7bc5fcf60487c3a2bb29bf1f9df3906462cdf5bff68d648db826fdae45948db8379f7713daaa8ffbc47b39907c3b9191e43a92695f0e1619664e0ba01086b4559020d440702eee1f8025867a93df64e6eee41d36a7746ad70b0b4b6881c4acf7083fd3b6ae17ce968cb65afa009cba3995945feb3d73edb7481fa04249814bcfbe642ae42e03329c757537e8974278269ed001ed56488fd6369945102045a4069cc399e2d7cc31e7f60e64a1f370963f229d0a296675ecdef9b69", @typed={0x8, 0x7a, 0x0, 0x0, @uid}, @generic="8f9717ebd5d2011d9deaed57c3d3e13cdc81abe1c222ec9a3c4451c225e88f462096ddeff78085fec353675da6b3a6ebde2d7494e8", @typed={0x8, 0x2b, 0x0, 0x0, @u32=0x4}, @generic="17ae835122495f5218ef9ad162af5759553cff190c4ca4efef42bf828b62c2bdd2b372b4843b0788f5e2e540609bc00bd57ea727c02e6d1ad6ff0719b2575ba07b1fa8daddd4e50540bec6469d4e8ee62dcb999b37fd8aacac538299203f64b7431e9b56b6a01c6d17a5b17b85834c5215d8eaea95479e9e2107328e74ddbf102ff4ed0260fa8a62219d1d6ac67fdb9e2a44911fec07bc713e5b4a2df769ab79", @typed={0x8, 0x5d, 0x0, 0x0, @u32=0x1}]}, @generic, @generic="cef3cf291aa870b60a437a7ccb809f0ee8b39b66f6671ccdb7f14fd90a0801d14a504eca70bf49657ae4e554b9fc42bb29def30cf0cffef5f795405ae75142d2f2d687c19d5d7680177e5abf24fa5efecb0264de34427348848e52fb7cb433e6660cbb911546ce4aaf28806d6321be3278e313387734252734a6993f2d79e0ac795c8098f8fed3d7ce491d460c02e62a79a65f4f96ec830e3c6d188713e41b12e49cbe2f1ce52a105607b0f2e3128104a41d912d411ffbab6adc255f10cfbe60173e3aa15ce71ab033cfd9f256dba1a0ac660f347c56d5c168", @generic="f8af6978a4f40795b173f08c52e1cdad69bc783f6e7ac62ba9e1d277df9ee506bb04553776443d0422ca31"]}, 0x3ec}], 0x3, &(0x7f0000000e40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r2, r0, r0, r0, r0, r3, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}], 0x118, 0x48090}, 0x20044841)

[  975.200027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.205332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.217872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.231231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.299769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.329189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:54 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))

[  975.339306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:54 executing program 3:
syz_open_dev$tty20(0xc, 0x4, 0x0)
r0 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000080)={{0x3c}, 0x100, './file0\x00'})
fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000000)=0x4)

21:30:54 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))

21:30:54 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:30:54 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 7)

[  975.766977] FAULT_INJECTION: forcing a failure.
[  975.766977] name failslab, interval 1, probability 0, space 0, times 0
[  975.768675] CPU: 1 UID: 0 PID: 18790 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[  975.768707] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[  975.768721] Call Trace:
[  975.768729]  <TASK>
[  975.768738]  dump_stack_lvl+0xfa/0x120
[  975.768778]  should_fail_ex+0x4d7/0x5e0
[  975.768820]  ? security_sk_alloc+0x101/0x160
[  975.768847]  should_failslab+0xc2/0x120
[  975.768875]  __kmalloc_noprof+0xb4/0x4b0
[  975.768910]  ? __kasan_kmalloc+0x7f/0x90
[  975.768938]  ? trace_kmalloc+0x1f/0xb0
[  975.768971]  security_sk_alloc+0x101/0x160
[  975.769001]  sk_prot_alloc+0x20b/0x280
[  975.769037]  sk_alloc+0x34/0xbd0
[  975.769061]  ? __pfx_genl_release+0x10/0x10
[  975.769088]  __netlink_create+0x5d/0x280
[  975.769121]  ? __wake_up+0x3f/0x60
[  975.769151]  netlink_create+0x3ad/0x620
[  975.769188]  ? __pfx_genl_bind+0x10/0x10
[  975.769213]  ? __pfx_genl_unbind+0x10/0x10
[  975.769246]  __sock_create+0x369/0x810
[  975.769287]  __sys_socket+0x145/0x260
[  975.769321]  ? __pfx___sys_socket+0x10/0x10
[  975.769352]  ? ksys_write+0x1a3/0x240
[  975.769376]  ? __pfx_ksys_write+0x10/0x10
[  975.769406]  __x64_sys_socket+0x73/0xb0
[  975.769441]  do_syscall_64+0xbf/0x360
[  975.769477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  975.769509] RIP: 0033:0x7f7ce2e32197
[  975.769527] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  975.769550] RSP: 002b:00007f7ce03a50c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029
[  975.769573] RAX: ffffffffffffffda RBX: 00007f7ce2f43f60 RCX: 00007f7ce2e32197
[  975.769589] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  975.769603] RBP: 00007f7ce03a61d0 R08: 0000000000000000 R09: 0000000000000000
[  975.769617] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001
[  975.769631] R13: 0000000000000036 R14: 00000000200002c0 R15: 0000000000022000
[  975.769664]  </TASK>
21:30:54 executing program 6:
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @empty}})
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {0x5}, @broadcast, @device_a, @initial, {0x6, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)

21:30:54 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:30:54 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0)

21:30:55 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#/file0\n\b\x00\x00\x00'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x1e, 0x3ff, 0x1d2, 0x6224, 0x12, "beed1728f9754379"})

[  976.125098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:30:55 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[  978.853735] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  978.858767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  978.861176] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  978.870074] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  978.873131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  980.891605] Bluetooth: hci3: command tx timeout
[  982.942482] Bluetooth: hci3: command tx timeout
[  984.987865] Bluetooth: hci3: command tx timeout
[  987.035608] Bluetooth: hci3: command tx timeout
[ 1006.795734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1006.797615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1006.833314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1006.834870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1007.325349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1007.337997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1007.351234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1007.356979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1007.364001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1007.669826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1007.676859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1007.682346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:31:42 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0)

21:31:42 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000300)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x6, 0xe2d}}, @random="447dae9b3e5a8c22181bce2e6a17bab0dae6f269886bea0782b5532da945abfc644e53794a45aaa546e4a05a4f08f29bd43c52a0e4dcadb9c8c7fc9ddc12b80953909656908eed3f6eb669cec31dab45cb6a045fff0c46f456d774a6b14630e00cd69bf6a077e0c33ad17dfefa3b017d35b1080bba2d4e61382205833a1337089a81adca8369e25c9ce65f6704c307dc12560e5897b7bb30da1ecbfa5dd35509500f2c53efdd5b61857258be01842a83208380162abb76c090a79899d694"}, 0xd6)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:31:42 executing program 3:
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:31:42 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {0x5}, @broadcast, @device_a, @initial, {0x6, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)

21:31:42 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:31:42 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:31:42 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0xa0103)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r2, r3, 0x0, 0xa0103)

21:31:42 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 8)

[ 1023.557305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.565153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.567478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.607260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.643712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1023.673913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:31:42 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r1, 0x0, 0x0)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0xffff}]})
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:31:42 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

[ 1024.030360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:31:43 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 9)

21:31:43 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0)

21:31:43 executing program 6:
syz_80211_inject_frame(0x0, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {0x5}, @broadcast, @device_a, @initial, {0x6, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)

[ 1024.111069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1024.141489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:31:43 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1024.181755] FAULT_INJECTION: forcing a failure.
[ 1024.181755] name failslab, interval 1, probability 0, space 0, times 0
[ 1024.183427] CPU: 1 UID: 0 PID: 19791 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1024.183460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1024.183474] Call Trace:
[ 1024.183483]  <TASK>
[ 1024.183500]  dump_stack_lvl+0xfa/0x120
[ 1024.183541]  should_fail_ex+0x4d7/0x5e0
[ 1024.183585]  should_failslab+0xc2/0x120
[ 1024.183613]  kmem_cache_alloc_lru_noprof+0x73/0x3c0
[ 1024.183653]  ? __d_alloc+0x31/0xa10
[ 1024.183677]  ? security_transition_sid+0xbe/0x190
[ 1024.183714]  __d_alloc+0x31/0xa10
[ 1024.183744]  d_alloc_pseudo+0x1d/0xc0
[ 1024.183775]  alloc_file_pseudo+0xbe/0x220
[ 1024.183809]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1024.183839]  ? _raw_spin_unlock+0x1e/0x40
[ 1024.183865]  ? alloc_fd+0x2c1/0x560
[ 1024.183907]  sock_alloc_file+0x53/0x220
[ 1024.183938]  __sys_socket+0x1ba/0x260
[ 1024.183972]  ? __pfx___sys_socket+0x10/0x10
[ 1024.184003]  ? ksys_write+0x1a3/0x240
[ 1024.184026]  ? __pfx_ksys_write+0x10/0x10
[ 1024.184056]  __x64_sys_socket+0x73/0xb0
[ 1024.184090]  do_syscall_64+0xbf/0x360
[ 1024.184127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1024.184151] RIP: 0033:0x7f7ce2e32197
[ 1024.184169] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1024.184192] RSP: 002b:00007f7ce03a50c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029
[ 1024.184215] RAX: ffffffffffffffda RBX: 00007f7ce2f43f60 RCX: 00007f7ce2e32197
[ 1024.184231] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[ 1024.184245] RBP: 00007f7ce03a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 1024.184259] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001
[ 1024.184273] R13: 0000000000000036 R14: 00000000200002c0 R15: 0000000000022000
[ 1024.184306]  </TASK>
21:31:43 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x0, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1024.399437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:31:43 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000300)=@data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @broadcast, @broadcast, @device_a, {0x8, 0x1}, @device_b}, {0x2, 0x0, 0x0, 0x0, 0x8}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xff}, @device_a, @device_b, @random="c1d12957797a", {0x6, 0x60}}, {0xa, 0x0, 0x2, 0x1, 0x58}}}, @a_msdu=[{@device_b, @device_a, 0x84, "2619e2ba93330d13c65bc7a9597f194a6ab41a495d6d3a601df4aaec18d2389461890e177dfeaf2fb1df5790cf57792b7a1a6378de47f38b7ccf4108ccedbe32a1ab394640a83facdf03b0f17779a10ef250cd3b5179a95c54e91e7822c3b3b2237e1a5043e4676edd552ef37bc29e7e6305a8298d56bca0b38ff7ad698ca1937f7ad6fb"}, {@broadcast, @broadcast, 0xe1, "4eb0e8171c35c4d540cf776d3a6631929844ebc9adace1194fa78ba2ee610d76f190c37e9cbadf755767492f040f9747b798151f9c0eec2554cff43347627bd635892d52ac32e2450a5d1b365e36bf4626766a1562bfad09e9dd6f70b6b291c3619de9fd6bb7a77287608a19309513c170e93867cc6b8e53d258c6035aa98db00100013811d490e046311ccc551297006fffb1f400c715ee1dfca5fa5399c821b8b1c82a2846ecf840c948581d7b2a0eb2ad9a1f66a57f69f7beda64b94b497d536c8ced713f49cc67b007d150d846b6988244ae17ffa26725e9056431fcd197be"}, {@broadcast, @broadcast, 0xa3, "faf83f0b112556b2febf98955ae3b42cacd57fb90794577c91d8235baae81331a6ddcd0b7749102f1efe03b763a613de059a5be2ac223bc52a46087fa4da42736f27af11de2fc93b8b070053b86f6baf466cbc2380425c101a1a46e3f29d95d0e8c76f9db56ddcc72929ab4a399e4e99089a17ca60fdab4c59e1aca7685b3db4c77373b0014fc28c68d50553b07358a324b434b04684ce0700da2a38f4daa779b3a2bf"}, {@device_b, @broadcast, 0xd5, "24427f70e17a72024042b4c755eec027566131d1db4b7921051d1ffceebd53ddb9c6ebb37b739bc1068f032269c52da5e3660da369b71900f76dc04706f36e11490156cb577297582b87fbe314e416330d5ff1025df982b3bdb183563fc54ff17c84d6e383965b16b112753ebb41d7350a8f8ff00e865dcf8f25b4c6ad931026be9aa5111add8abf6bed1d754b232813df10757d58719964ac40ecd58b087725e3a368cc3257fdc08dbf6b94794d0c1e6a7e83c3f136d3705870f912df21f6eb07c883d385851d0fa6e46b9004fc27bd16d912c267"}]}, 0x356)

21:31:43 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r1, 0x0, 0x0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x9, 0x3f, 0x6, 0x200, 0x939e, 0x6e})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:31:43 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:31:43 executing program 4:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000300)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x6, 0xe2d}}, @random="447dae9b3e5a8c22181bce2e6a17bab0dae6f269886bea0782b5532da945abfc644e53794a45aaa546e4a05a4f08f29bd43c52a0e4dcadb9c8c7fc9ddc12b80953909656908eed3f6eb669cec31dab45cb6a045fff0c46f456d774a6b14630e00cd69bf6a077e0c33ad17dfefa3b017d35b1080bba2d4e61382205833a1337089a81adca8369e25c9ce65f6704c307dc12560e5897b7bb30da1ecbfa5dd35509500f2c53efdd5b61857258be01842a83208380162abb76c090a79899d694"}, 0xd6)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 1024.541522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1024.551031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1024.559635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1024.561404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1024.572066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1024.575634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1024.581569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1024.588165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:31:43 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 10)

21:31:43 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)={{0x10b, 0x2, 0x1f, 0x326, 0x25e, 0x9, 0x169, 0x1000}, "57e0a779dfb309559a66ab50fcfd7b8d73c548c79d40ed0a5edfdca5a296066d24", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x741)

21:31:43 executing program 6:
syz_80211_inject_frame(0x0, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {0x5}, @broadcast, @device_a, @initial, {0x6, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)

[ 1024.867907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1024.903375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:31:43 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000100)={{}, 0x0, 0x10, @inherit={0x50, &(0x7f0000000080)={0x1, 0x1, 0x3, 0x100000000, {0x1, 0x1, 0x80000001, 0xffff, 0x2}, [0x80000001]}}, @name="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"})
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

[ 1024.928354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:31:44 executing program 4:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000300)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x6, 0xe2d}}, @random="447dae9b3e5a8c22181bce2e6a17bab0dae6f269886bea0782b5532da945abfc644e53794a45aaa546e4a05a4f08f29bd43c52a0e4dcadb9c8c7fc9ddc12b80953909656908eed3f6eb669cec31dab45cb6a045fff0c46f456d774a6b14630e00cd69bf6a077e0c33ad17dfefa3b017d35b1080bba2d4e61382205833a1337089a81adca8369e25c9ce65f6704c307dc12560e5897b7bb30da1ecbfa5dd35509500f2c53efdd5b61857258be01842a83208380162abb76c090a79899d694"}, 0xd6)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 1024.957219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1025.044595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1025.061733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1025.071814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1025.076900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:31:57 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:31:57 executing program 4:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000300)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_b, @device_a, @initial, {0x6, 0xe2d}}, @random="447dae9b3e5a8c22181bce2e6a17bab0dae6f269886bea0782b5532da945abfc644e53794a45aaa546e4a05a4f08f29bd43c52a0e4dcadb9c8c7fc9ddc12b80953909656908eed3f6eb669cec31dab45cb6a045fff0c46f456d774a6b14630e00cd69bf6a077e0c33ad17dfefa3b017d35b1080bba2d4e61382205833a1337089a81adca8369e25c9ce65f6704c307dc12560e5897b7bb30da1ecbfa5dd35509500f2c53efdd5b61857258be01842a83208380162abb76c090a79899d694"}, 0xd6)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:31:57 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 11)

21:31:57 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x3f}, @device_b, @device_b, @from_mac=@broadcast, {0x2, 0x34b}}}, 0x18)

21:31:57 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x4, 0x5b7, 0x1, 0x2, 0x35, 0x7})

21:31:57 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x0, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:31:57 executing program 6:
syz_80211_inject_frame(0x0, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {0x5}, @broadcast, @device_a, @initial, {0x6, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)

21:31:57 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

[ 1038.140129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.145176] FAULT_INJECTION: forcing a failure.
[ 1038.145176] name failslab, interval 1, probability 0, space 0, times 0
[ 1038.146964] CPU: 1 UID: 0 PID: 20061 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1038.146994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1038.147007] Call Trace:
[ 1038.147014]  <TASK>
[ 1038.147023]  dump_stack_lvl+0xfa/0x120
[ 1038.147064]  should_fail_ex+0x4d7/0x5e0
[ 1038.147103]  ? alloc_empty_file+0x58/0x1e0
[ 1038.147131]  should_failslab+0xc2/0x120
[ 1038.147158]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1038.147191]  ? d_instantiate+0x79/0xa0
[ 1038.147216]  ? lock_release+0xc8/0x290
[ 1038.147247]  alloc_empty_file+0x58/0x1e0
[ 1038.147277]  alloc_file_pseudo+0x12b/0x220
[ 1038.147308]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1038.147338]  ? alloc_fd+0x2c1/0x560
[ 1038.147377]  sock_alloc_file+0x53/0x220
[ 1038.147406]  __sys_socket+0x1ba/0x260
[ 1038.147438]  ? __pfx___sys_socket+0x10/0x10
[ 1038.147467]  ? ksys_write+0x1a3/0x240
[ 1038.147488]  ? __pfx_ksys_write+0x10/0x10
[ 1038.147524]  __x64_sys_socket+0x73/0xb0
[ 1038.147559]  do_syscall_64+0xbf/0x360
[ 1038.147594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1038.147617] RIP: 0033:0x7f7ce2e32197
[ 1038.147634] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1038.147655] RSP: 002b:00007f7ce03a50c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029
[ 1038.147677] RAX: ffffffffffffffda RBX: 00007f7ce2f43f60 RCX: 00007f7ce2e32197
[ 1038.147691] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[ 1038.147705] RBP: 00007f7ce03a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 1038.147718] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000002
[ 1038.147732] R13: 0000000000000036 R14: 00000000200002c0 R15: 0000000000022000
[ 1038.147763]  </TASK>
[ 1038.180583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.187254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.194612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.212764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.295961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:31:57 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x68e146a1)
ioctl$VT_SETMODE(r1, 0x5602, 0x0)

21:31:57 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:31:57 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0x4, 0x5b7, 0x1, 0x2, 0x35, 0x7})

21:31:57 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 12)

21:31:57 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0)

[ 1038.801254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1038.818797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1041.455705] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1041.459043] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1041.465032] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1041.470435] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1041.475069] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1043.547790] Bluetooth: hci3: command tx timeout
[ 1045.595732] Bluetooth: hci3: command tx timeout
[ 1047.643751] Bluetooth: hci3: command tx timeout
[ 1049.692616] Bluetooth: hci3: command tx timeout
[ 1069.000658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1069.001756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1069.108092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1069.109280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1069.696459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1069.702354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1069.708346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1070.013695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1070.021873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:32:40 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x0, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:32:40 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:32:40 executing program 3:
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080), 0x6e, &(0x7f0000000180)=[{&(0x7f0000000300)=""/243, 0xf3}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000280)=""/90, 0x30}, {&(0x7f00000006c0)=""/275, 0x113}, {&(0x7f0000000140)=""/28, 0x1c}], 0x5, &(0x7f0000000440)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x12001)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000000))

21:32:40 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:32:40 executing program 4:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#B ./b3file0'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000480)={0x0, 0x0, 0x1c, 0x4, 0x18f, &(0x7f0000000080)="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"})
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r3, 0x0, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
ioctl$VT_SETMODE(r4, 0x5602, 0x0)

21:32:40 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000000)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x67e5}, @broadcast, @broadcast, @from_mac=@device_b, {0x6, 0xd7}}, 0x30, @void}, 0x1a)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@pspoll={{}, @random=0xd3e, @from_mac=@broadcast}, 0x10)

21:32:40 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 13)

21:32:40 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0)

[ 1081.577465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1081.642873] FAULT_INJECTION: forcing a failure.
[ 1081.642873] name failslab, interval 1, probability 0, space 0, times 0
[ 1081.643805] CPU: 1 UID: 0 PID: 20860 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1081.643822] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1081.643830] Call Trace:
[ 1081.643835]  <TASK>
[ 1081.643840]  dump_stack_lvl+0xfa/0x120
[ 1081.643864]  should_fail_ex+0x4d7/0x5e0
[ 1081.643889]  ? security_file_alloc+0x35/0x130
[ 1081.643908]  should_failslab+0xc2/0x120
[ 1081.643924]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1081.643945]  ? __create_object+0x59/0x80
[ 1081.643965]  security_file_alloc+0x35/0x130
[ 1081.643984]  init_file+0x95/0x4c0
[ 1081.644001]  alloc_empty_file+0x76/0x1e0
[ 1081.644018]  alloc_file_pseudo+0x12b/0x220
[ 1081.644035]  ? __pfx_alloc_file_pseudo+0x10/0x10
[ 1081.644055]  ? alloc_fd+0x2c1/0x560
[ 1081.644079]  sock_alloc_file+0x53/0x220
[ 1081.644096]  __sys_socket+0x1ba/0x260
[ 1081.644115]  ? __pfx___sys_socket+0x10/0x10
[ 1081.644132]  ? ksys_write+0x1a3/0x240
[ 1081.644144]  ? __pfx_ksys_write+0x10/0x10
[ 1081.644160]  __x64_sys_socket+0x73/0xb0
[ 1081.644178]  do_syscall_64+0xbf/0x360
[ 1081.644198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1081.644212] RIP: 0033:0x7f7ce2e32197
[ 1081.644222] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1081.644235] RSP: 002b:00007f7ce03a50c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029
[ 1081.644248] RAX: ffffffffffffffda RBX: 00007f7ce2f43f60 RCX: 00007f7ce2e32197
[ 1081.644256] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[ 1081.644264] RBP: 00007f7ce03a61d0 R08: 0000000000000000 R09: 0000000000000000
[ 1081.644272] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000002
[ 1081.644279] R13: 0000000000000036 R14: 00000000200002c0 R15: 0000000000022000
[ 1081.644296]  </TASK>
21:32:40 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x9)

[ 1081.905967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:32:41 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:32:41 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 14)

21:32:41 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, 0x0, 0x0)

[ 1082.039312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1082.160465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1084.780483] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1084.784742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1084.786323] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1084.792797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1084.794764] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1086.812650] Bluetooth: hci3: command tx timeout
[ 1088.859776] Bluetooth: hci3: command tx timeout
[ 1090.907675] Bluetooth: hci3: command tx timeout
[ 1092.955721] Bluetooth: hci3: command tx timeout
[ 1113.118851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1113.120240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1113.252858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1113.254028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1113.834784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1113.840043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1113.844127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1113.848434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1114.154869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1114.162115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:33:24 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:33:24 executing program 3:
syz_open_dev$tty20(0xc, 0x4, 0x1)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x12002, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:33:24 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast, @device_a, @initial, {0x6, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)

21:33:24 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:33:24 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 15)

21:33:24 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (fail_nth: 1)

21:33:24 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:33:24 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x0, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1125.531649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1125.544546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1125.554878] FAULT_INJECTION: forcing a failure.
[ 1125.554878] name failslab, interval 1, probability 0, space 0, times 0
[ 1125.555785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1125.556791] CPU: 1 UID: 0 PID: 21557 Comm: syz-executor.4 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1125.556825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1125.556840] Call Trace:
[ 1125.556848]  <TASK>
[ 1125.556857]  dump_stack_lvl+0xfa/0x120
[ 1125.556900]  should_fail_ex+0x4d7/0x5e0
[ 1125.556947]  should_failslab+0xc2/0x120
[ 1125.556977]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1125.557014]  ? _raw_spin_unlock_irqrestore+0x2c/0x50
[ 1125.557045]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1125.557071]  ? __request_module+0x274/0x630
[ 1125.557100]  ? sock_ioctl+0x5d2/0x630
[ 1125.557135]  __request_module+0x274/0x630
[ 1125.557159]  ? __pfx___request_module+0x10/0x10
[ 1125.557182]  ? find_held_lock+0x2b/0x80
[ 1125.557221]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1125.557252]  ? lock_is_held_type+0x9e/0x120
[ 1125.557287]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1125.557321]  ? do_vfs_ioctl+0x125/0x1470
[ 1125.557358]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1125.557392]  ? __mutex_unlock_slowpath+0x111/0x7b0
[ 1125.557437]  sock_ioctl+0x5d2/0x630
[ 1125.557473]  ? __pfx_sock_ioctl+0x10/0x10
[ 1125.557523]  ? lock_release+0xc8/0x290
[ 1125.557561]  ? selinux_file_ioctl+0xb9/0x280
[ 1125.557594]  ? __pfx_sock_ioctl+0x10/0x10
[ 1125.557632]  __x64_sys_ioctl+0x18f/0x210
[ 1125.557670]  do_syscall_64+0xbf/0x360
[ 1125.557709]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1125.557735] RIP: 0033:0x7fbb5faddb19
[ 1125.557754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1125.557779] RSP: 002b:00007fbb5d053188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1125.557803] RAX: ffffffffffffffda RBX: 00007fbb5fbf0f60 RCX: 00007fbb5faddb19
[ 1125.557820] RDX: 0000000020000000 RSI: 0000000000008982 RDI: 0000000000000003
[ 1125.557836] RBP: 00007fbb5d0531d0 R08: 0000000000000000 R09: 0000000000000000
[ 1125.557851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1125.557866] R13: 00007ffc0a1977bf R14: 00007fbb5d053300 R15: 0000000000022000
[ 1125.557901]  </TASK>
[ 1125.560118] FAULT_INJECTION: forcing a failure.
[ 1125.560118] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 1125.582207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1125.582531] CPU: 1 UID: 0 PID: 21558 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1125.582567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1125.582582] Call Trace:
[ 1125.582590]  <TASK>
[ 1125.582600]  dump_stack_lvl+0xfa/0x120
[ 1125.582641]  should_fail_ex+0x4d7/0x5e0
[ 1125.582686]  should_fail_alloc_page+0xe0/0x110
[ 1125.582718]  prepare_alloc_pages+0x1af/0x500
[ 1125.582749]  ? __is_insn_slot_addr+0x2e/0x290
[ 1125.582792]  __alloc_frozen_pages_noprof+0x17f/0x1f10
[ 1125.582840]  ? __is_insn_slot_addr+0x140/0x290
[ 1125.582881]  ? kernel_text_address+0x5b/0xc0
[ 1125.582910]  ? __kernel_text_address+0xd/0x40
[ 1125.582939]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1125.582977]  ? arch_stack_walk+0x9c/0xf0
[ 1125.583018]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1125.583055]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1125.583088]  ? policy_nodemask+0xeb/0x4e0
[ 1125.583129]  alloc_pages_mpol+0xed/0x340
[ 1125.583165]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1125.583201]  ? lock_acquire+0x15e/0x2f0
[ 1125.583229]  ? ___pte_offset_map+0x31/0x370
[ 1125.583259]  ? get_vma_policy+0x23b/0x350
[ 1125.583302]  vma_alloc_folio_noprof+0xe9/0x440
[ 1125.583342]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1125.583380]  ? find_held_lock+0x2b/0x80
[ 1125.583417]  ? __handle_mm_fault+0x7ed/0x30f0
[ 1125.583456]  ? lock_release+0xc8/0x290
[ 1125.583497]  __handle_mm_fault+0x142c/0x30f0
[ 1125.583536]  ? do_user_addr_fault+0x4aa/0xeb0
[ 1125.583570]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1125.583608]  ? lock_release+0x121/0x290
[ 1125.583665]  handle_mm_fault+0x2c3/0x900
[ 1125.583703]  ? access_error+0x17d/0x380
[ 1125.583735]  do_user_addr_fault+0x4fa/0xeb0
[ 1125.583773]  exc_page_fault+0xb0/0x180
[ 1125.583807]  asm_exc_page_fault+0x26/0x30
[ 1125.583831] RIP: 0033:0x7f7ce2de3879
[ 1125.583851] Code: b8 2c 00 00 00 0f 05 48 3d 00 f0 ff ff 77 72 c3 90 55 48 83 ec 30 44 89 4c 24 2c 4c 89 44 24 20 48 89 54 24 18 48 89 74 24 10 <89> 7c 24 08 89 4c 24 28 e8 fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24
[ 1125.583875] RSP: 002b:00007f7ce03a4ff0 EFLAGS: 00010206
[ 1125.583895] RAX: 0000000000000001 RBX: 00007f7ce03a50f0 RCX: 0000000000000000
[ 1125.583911] RDX: 0000000000000028 RSI: 00007f7ce03a5140 RDI: 0000000000000004
[ 1125.583927] RBP: 0000000000000001 R08: 00007f7ce03a5044 R09: 000000000000000c
[ 1125.583942] R10: 0000000000000000 R11: 00007f7ce2e8a72b R12: 00007f7ce03a5098
[ 1125.583958] R13: 00007f7ce03a5140 R14: 0000000000000004 R15: 0000000000000000
[ 1125.583993]  </TASK>
[ 1125.584134] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[ 1125.603294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1125.615416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1125.686845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:33:24 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (fail_nth: 2)

21:33:24 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:33:24 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x0, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:33:24 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast, @device_a, @initial, {0x0, 0x9}}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)

21:33:25 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:33:25 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0400, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:33:25 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1126.009274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:33:25 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (fail_nth: 3)

[ 1126.033741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1126.052737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:33:25 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36) (fail_nth: 16)

[ 1126.068814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1126.152181] FAULT_INJECTION: forcing a failure.
[ 1126.152181] name failslab, interval 1, probability 0, space 0, times 0
[ 1126.153156] CPU: 0 UID: 0 PID: 21798 Comm: syz-executor.4 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1126.153174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1126.153182] Call Trace:
[ 1126.153187]  <TASK>
[ 1126.153193]  dump_stack_lvl+0xfa/0x120
[ 1126.153221]  should_fail_ex+0x4d7/0x5e0
[ 1126.153253]  should_failslab+0xc2/0x120
[ 1126.153272]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[ 1126.153295]  ? trace_kmalloc+0x1f/0xb0
[ 1126.153310]  ? __kmalloc_cache_noprof+0x1b3/0x3e0
[ 1126.153330]  ? __request_module+0x292/0x630
[ 1126.153351]  ? sock_ioctl+0x5d2/0x630
[ 1126.153371]  kstrdup+0x3e/0xc0
[ 1126.153387]  __request_module+0x292/0x630
[ 1126.153402]  ? __pfx___request_module+0x10/0x10
[ 1126.153422]  ? lock_is_held_type+0x9e/0x120
[ 1126.153444]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1126.153467]  ? do_vfs_ioctl+0x125/0x1470
[ 1126.153504]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1126.153523]  ? __mutex_unlock_slowpath+0x111/0x7b0
[ 1126.153557]  sock_ioctl+0x5d2/0x630
[ 1126.153578]  ? __pfx_sock_ioctl+0x10/0x10
[ 1126.153596]  ? lock_release+0xc8/0x290
[ 1126.153630]  ? selinux_file_ioctl+0xb9/0x280
[ 1126.153652]  ? __pfx_sock_ioctl+0x10/0x10
[ 1126.153676]  __x64_sys_ioctl+0x18f/0x210
[ 1126.153702]  do_syscall_64+0xbf/0x360
[ 1126.153726]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1126.153741] RIP: 0033:0x7fbb5faddb19
[ 1126.153752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1126.153765] RSP: 002b:00007fbb5d053188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1126.153777] RAX: ffffffffffffffda RBX: 00007fbb5fbf0f60 RCX: 00007fbb5faddb19
[ 1126.153786] RDX: 0000000020000000 RSI: 0000000000008982 RDI: 0000000000000003
[ 1126.153794] RBP: 00007fbb5d0531d0 R08: 0000000000000000 R09: 0000000000000000
[ 1126.153801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1126.153809] R13: 00007ffc0a1977bf R14: 00007fbb5d053300 R15: 0000000000022000
[ 1126.153848]  </TASK>
[ 1126.154468] FAULT_INJECTION: forcing a failure.
[ 1126.154468] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1126.191103] CPU: 1 UID: 0 PID: 21808 Comm: syz-executor.5 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1126.191139] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1126.191154] Call Trace:
[ 1126.191162]  <TASK>
[ 1126.191172]  dump_stack_lvl+0xfa/0x120
[ 1126.191213]  should_fail_ex+0x4d7/0x5e0
21:33:25 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@ack={{}, {0xd5f}}, 0x4e)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=ANY=[@ANYBLOB="189300000806110000d7e67e48fa3f81eedb080211000001002008021100"], 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000c80)=@data_frame={@qos_ht={{{@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x559}, @random="3125e44befaf", @device_b, @broadcast, {0x0, 0x8}}, {0x5, 0x1, 0x0, 0x0, 0x8}}, {@type11={{0x0, 0x2, 0x8}, {0x5}, @broadcast, @device_a, @from_mac=@broadcast, {0xa}}, {0x6, 0x1, 0x0, 0x1, 0x81}}}, @ver_80211n={0x0, 0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x80, "195bde8fbcbecffd9f98a8f963eeb15381c7efe3450030d5764f901b40a94081309c48657885c1bdb5f14043c4e1cba3857a4b180d84363eb2409ca01d24f524dfc9ee144afca87eac44d18c4cf917c87757fccc6a60cbb8384e459d65811e272b7a34e17e03a165436f8600c21b194745471651ee27185d4cf1aef203f3c898"}, {@device_b, @device_b, 0xb4, "a35b7de9f7d99e9d10921e6a0c9be734b0dcabacecce31dce1e0f7a434af569481aa1a9ef660f5bcdc6f6399781fbc76bf020222475316a119be5a3e146c0ff301503e47f318d3f8124c41fb9d72ef5ae9d724f08f741191f7e2d80132b9960395202e5227ac19745d43a4118b49546bddd87317120a682bc04c5160d9eae9ec066e528bad490b0369fcb2df44e67a282ce0d5ce372db9e81d36cc08227c7b29c8492aae79f848773e29ab20dd990df5233f5b87"}, {@device_b, @device_a, 0x68, "d7f7ab8ddee0a80b96f97396f8893b71e14b3570de92fbb9c7a4a83eafe8c366c779b9a04bce7c08e87f2e879f7f63e520dcf85d3366d8a70333dacf0a3b094edd02e0f7f6d094a8ff2df8456f2e6a3aaef4fc7db0e28c0261630fabedbe5274213ba2ababdd38c3"}, {@device_a, @broadcast, 0x1000, "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"}, {@device_a, @broadcast, 0x81, "ade2c58b477214477702eba89a8af1c9480fe0f163185aa524cad69c7d775f68dddeb65923e20f96073c64c0c9299f63410b932ed7950fe9b3b3e4f15fd8a196b98a11ebae83080a8377da6f9df87919054dac22d695d2c7323c2ff89e5222364aefecdb184b4d9da2b778ccca33c8afbdf27e4de7b9d8180c716a050f659ae367"}]}, 0x12aa)

[ 1126.191258]  _copy_from_user+0x30/0xd0
[ 1126.191286]  move_addr_to_kernel.part.0+0x40/0x120
[ 1126.191326]  __sys_sendto+0x1da/0x570
[ 1126.191351]  ? __pfx___sys_sendto+0x10/0x10
[ 1126.191372]  ? css_rstat_updated+0x1b8/0x4d0
[ 1126.191422]  ? find_held_lock+0x2b/0x80
[ 1126.191459]  ? rcu_read_unlock+0x2d/0xb0
[ 1126.191496]  ? lock_release+0xc8/0x290
[ 1126.191527]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1126.191570]  ? find_held_lock+0x2b/0x80
[ 1126.191607]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1126.191648]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 1126.191690]  ? lock_release+0xc8/0x290
[ 1126.191715]  ? access_error+0x17d/0x380
[ 1126.191753]  __x64_sys_sendto+0xe1/0x1c0
[ 1126.191775]  ? do_syscall_64+0x85/0x360
[ 1126.191811]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 1126.191838]  do_syscall_64+0xbf/0x360
[ 1126.191876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1126.191902] RIP: 0033:0x7f7ce2de38ac
[ 1126.191921] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 1126.191946] RSP: 002b:00007f7ce03a4ff0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 1126.191971] RAX: ffffffffffffffda RBX: 00007f7ce03a50f0 RCX: 00007f7ce2de38ac
[ 1126.191988] RDX: 0000000000000028 RSI: 00007f7ce03a5140 RDI: 0000000000000004
[ 1126.192004] RBP: 0000000000000000 R08: 00007f7ce03a5044 R09: 000000000000000c
[ 1126.192019] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f7ce03a5098
[ 1126.192034] R13: 00007f7ce03a5140 R14: 0000000000000004 R15: 0000000000000000
[ 1126.192069]  </TASK>
21:33:25 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6)

21:33:25 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (fail_nth: 4)

21:33:25 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:33:25 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r1, 0x0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x420040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'})
r3 = dup3(r1, r0, 0x80000)
ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000500)={0x0, "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"})

[ 1126.413825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1126.450892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1126.470980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1126.525105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:33:25 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val={0x1, 0x3, [{0x18}, {0x60, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x12a)

21:33:25 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x0, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:33:25 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (fail_nth: 5)

[ 1126.684773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1126.706962] FAULT_INJECTION: forcing a failure.
[ 1126.706962] name failslab, interval 1, probability 0, space 0, times 0
[ 1126.708158] CPU: 0 UID: 0 PID: 22012 Comm: syz-executor.4 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1126.708174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1126.708182] Call Trace:
[ 1126.708187]  <TASK>
[ 1126.708193]  dump_stack_lvl+0xfa/0x120
[ 1126.708219]  should_fail_ex+0x4d7/0x5e0
[ 1126.708248]  should_failslab+0xc2/0x120
[ 1126.708265]  __kmalloc_cache_noprof+0x6a/0x3e0
[ 1126.708283]  ? kasan_save_track+0x14/0x30
[ 1126.708298]  ? __kasan_kmalloc+0x7f/0x90
[ 1126.708313]  ? call_usermodehelper_setup+0xa9/0x330
[ 1126.708329]  ? trace_kmalloc+0x1f/0xb0
[ 1126.708353]  call_usermodehelper_setup+0xa9/0x330
[ 1126.708369]  ? __pfx_free_modprobe_argv+0x10/0x10
[ 1126.708381]  ? __asan_memcpy+0x3d/0x60
[ 1126.708398]  ? sock_ioctl+0x5d2/0x630
[ 1126.708415]  __request_module+0x385/0x630
[ 1126.708430]  ? __pfx___request_module+0x10/0x10
[ 1126.708448]  ? lock_is_held_type+0x9e/0x120
[ 1126.708469]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1126.708495]  ? do_vfs_ioctl+0x125/0x1470
[ 1126.708517]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1126.708537]  ? __mutex_unlock_slowpath+0x111/0x7b0
[ 1126.708568]  sock_ioctl+0x5d2/0x630
[ 1126.708588]  ? __pfx_sock_ioctl+0x10/0x10
[ 1126.708605]  ? lock_release+0xc8/0x290
[ 1126.708636]  ? selinux_file_ioctl+0xb9/0x280
[ 1126.708657]  ? __pfx_sock_ioctl+0x10/0x10
[ 1126.708679]  __x64_sys_ioctl+0x18f/0x210
[ 1126.708703]  do_syscall_64+0xbf/0x360
[ 1126.708725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1126.708739] RIP: 0033:0x7fbb5faddb19
[ 1126.708749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1126.708761] RSP: 002b:00007fbb5d053188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1126.708773] RAX: ffffffffffffffda RBX: 00007fbb5fbf0f60 RCX: 00007fbb5faddb19
[ 1126.708781] RDX: 0000000020000000 RSI: 0000000000008982 RDI: 0000000000000003
[ 1126.708788] RBP: 00007fbb5d0531d0 R08: 0000000000000000 R09: 0000000000000000
[ 1126.708795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1126.708802] R13: 00007ffc0a1977bf R14: 00007fbb5d053300 R15: 0000000000022000
[ 1126.708839]  </TASK>
[ 1126.789604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1126.798896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1126.811797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:33:37 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
close(r0)
syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x68e146a1)
ioctl$VT_DISALLOCATE(r1, 0x5608)

21:33:37 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val={0x1, 0x2, [{0x18}, {0x60, 0x1}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x129)

21:33:37 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:33:37 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:33:37 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (fail_nth: 6)

21:33:37 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000300)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @random="6fadc7f2b16a", @broadcast, {0xc, 0x8a7}}, {0x7, 0x1, 0x2, 0x0, 0x80}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @broadcast, @device_a, @initial, {0x2, 0x6}}, {0x2, 0x0, 0x0, 0x1, 0xf7}}}, @a_msdu=[{@broadcast, @broadcast, 0xb8, "d0400a82689f92ea30fd6fe8b2e6ff78153791b2a5635298e9df597b909f26a324471bec3fd05f4ada2d89d79ed6a81827350536f3264200ac473f458788a495477b55e145670e10a6b4ed875502d05b649fa4e4bd996ace8252ad241e6196e6faaaf6087ce36729de2c21c4440af99897e751072c589961ac978b8ced79979099e6284aeaff99428072cdc9e1156930789c7129ce0bdc6e2659cddedb582e1639b5ed7e0fa648db7daf68a9f202732ef744fe32a9b39070"}, {@device_a, @device_b, 0xeb, "19f7edfcec32cb564b3f1a7ac4192ec0d9e613a885a0b8222a8682da688faac543b6d874df5dc9a285ee4b644501ca0b6757897e61d94b3a10491f36b88253d1e816a9c12f4b496a998a63710ca5fb409aeb3c04c3563cee2e39bcfa30634093a222952b9cc05120ebef2a422379cb28add168c11f3a99b70ed77dbd13720eb6316ef698ce521753f18873bc3f5e1b5212e67d4f23a8a1bd32de1db1ce1e317b0c5bc73c8af1df7605eed37f2762988003f4ca61d173e42c631b576a3bf82a497bef5397430becae805c7c77c88614316a7a9f23b128c8cd62876662ee81159cd56dbbe777358cc0bdb150"}]}, 0x1f8)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:33:37 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x3}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:33:37 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1138.723655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1138.742528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1138.744410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1138.755867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1138.761839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1138.782341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:33:37 executing program 3:
syz_open_dev$tty20(0xc, 0x4, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = dup2(r1, r0)
fchmod(r2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r3, 0x0, 0x0)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xfd)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x321fc0, 0x0)
flock(r4, 0x3)

21:33:38 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) (fail_nth: 7)

21:33:38 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1139.065758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1139.095120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1139.123335] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1139.179184] FAULT_INJECTION: forcing a failure.
[ 1139.179184] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1139.181075] CPU: 1 UID: 0 PID: 22348 Comm: syz-executor.4 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1139.181107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1139.181120] Call Trace:
[ 1139.181128]  <TASK>
[ 1139.181137]  dump_stack_lvl+0xfa/0x120
[ 1139.181178]  should_fail_ex+0x4d7/0x5e0
[ 1139.181220]  _copy_to_user+0x32/0xd0
[ 1139.181248]  simple_read_from_buffer+0xe0/0x180
[ 1139.181287]  proc_fail_nth_read+0x18a/0x240
[ 1139.181314]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1139.181340]  ? security_file_permission+0x22/0x90
[ 1139.181377]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1139.181401]  vfs_read+0x1eb/0xbe0
[ 1139.181431]  ? __pfx_vfs_read+0x10/0x10
[ 1139.181455]  ? lock_release+0xc8/0x290
[ 1139.181496]  ? __fget_files+0x20d/0x3b0
[ 1139.181547]  ksys_read+0x121/0x240
[ 1139.181568]  ? __pfx_ksys_read+0x10/0x10
[ 1139.181603]  do_syscall_64+0xbf/0x360
[ 1139.181654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1139.181679] RIP: 0033:0x7fbb5fa9069c
[ 1139.181697] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1139.181720] RSP: 002b:00007fbb5d053170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1139.181743] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fbb5fa9069c
[ 1139.181759] RDX: 000000000000000f RSI: 00007fbb5d0531e0 RDI: 0000000000000004
[ 1139.181773] RBP: 00007fbb5d0531d0 R08: 0000000000000000 R09: 0000000000000000
[ 1139.181788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1139.181802] R13: 00007ffc0a1977bf R14: 00007fbb5d053300 R15: 0000000000022000
[ 1139.181837]  </TASK>
21:33:51 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val={0x1, 0x1, [{0x18}]}, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x128)

21:33:51 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:33:51 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:33:51 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=ANY=[@ANYBLOB="189300000c021100000108021100021100000100"/30], 0x1e)

21:33:51 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x7}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:33:51 executing program 3:
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x12)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYRES16], 0xd)
sendfile(r0, r1, 0x0, 0x68e146a1)
fcntl$setstatus(r0, 0x4, 0x44000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={r2, 0x3, 0xffffffffffffffff, 0x1000})
openat(0xffffffffffffffff, &(0x7f0000000400)='./file0/file0\x00', 0x4a4381, 0x6)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f00000003c0))
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r4, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r4, 0x4, 0x44800)
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040))
r5 = dup(r3)
ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f0000000380)={0xcd, 0x3})
io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000180)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}]}, 0x8)
write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0/file0', [{0x20, '(@&^'}, {0x20, '\x00'}], 0xa, "d3c974b9e1bc60cf0a1a35c74e3e773461687e0fd0052b778816d28439df1e38233cf88b2d76d875af736c708378a533c3d2ddc8e577024318005c4b5528d6b5a0165c5fbfe922fb26b7e79b1b7dc7da4073f8da902b066e7f2371c75444a88a292ef1523f0999d93277c9a8cbfbf619833c1fed186f1f8051bb7726822891b47f94a4229c751d3daae051bc16b68a501eb2ab124f1a0885d0737ac865bb9f1096dd317588dd05a099c27bc2cdf226079be75c99d3a9360f4bf4cfc42eea1d95f20fdf255a295d083a7a80b8ba3f29ce326a427056cace9ac4f3f7c05fdbd8e6ec529bf56f15f9af5f3e9f1fbfa0a91f9de5ee70"}, 0x10c)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:33:51 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:33:51 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

[ 1152.815928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1152.832286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1152.846439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1152.860721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1152.897730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:33:52 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x2, &(0x7f0000000000))

[ 1153.156093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1153.178111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1153.250044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:34:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x4b47, &(0x7f0000000000))

21:34:06 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@cf_end={{}, {0x9}, @device_a, @from_mac=@broadcast}, 0x10)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:34:06 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:34:06 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:34:06 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x50}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:34:06 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:34:06 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x2, 0x0, 0x100})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:34:06 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1, 0x99}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

[ 1167.229920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1167.299922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1167.312478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1167.318090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1167.326885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1167.335908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:34:06 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x20)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x1f)

21:34:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x4b49, &(0x7f0000000000))

[ 1167.540768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:34:06 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))

21:34:06 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

21:34:06 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1167.648864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:34:06 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x81, 0x5, 0x3, 0xedc, 0x1})

21:34:06 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x58}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:34:06 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x0, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:34:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x541b, &(0x7f0000000000))

[ 1167.718552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1167.733110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1167.803896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:34:06 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x400, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

21:34:06 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x400, 0x4}, {0x9e3, 0x1}, {0x1f, 0x1}, {0x40, 0x2da}, {0x0, 0xb2b}, {0x81}]})
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x68e146a1)
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f00000000c0)="97bd5948eb7c18f02698cf6147baf0686c0b6dfc09de1280c335f4c6dc4275372269bb08d1841eb1867e85e3c3013423594929744b9b66b512f3e17ec4051b28f850a9e8b948f814f6353a2ddf4da7c3424c8ab057c88267cdcee3aa1a1cd5a5f023a0fe")
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:34:06 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000300)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7}, @broadcast, @device_a, @from_mac=@device_b, {0x4, 0x6}}, @ver_80211n={0x0, 0x1c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x3800, 0x4b, @default, @val={0x1, 0x4, [{0x18, 0x1}, {0x3}, {0x0, 0x1}, {0xc}]}, @val={0x2d, 0x1a, {0x40, 0x1, 0x3, 0x0, {0x3ff, 0x1ff9, 0x0, 0x8}, 0x1, 0x7c4, 0x3}}, [{0xdd, 0x8b, "40cd6e3d7c22c39bf647d4bddfb78699292ab1470cd54e050736e866cedc9960505ff09e463adff3c3c5db245ddc7901e9b56c6e549bdbcf7b1396943f7b0c183f7f624a733910b10dbe1f5d8232f3e0fb2ba5cba0091068384c1675c18c096c09f703c8c76fe82ce5dcb4cdf09b643c4822d26020835350e4c31a50a00efa24fc3a81f0e473346c5d4b6b"}, {0xdd, 0xea, "fd0b5c05b4c2ad91f5b27e77e93e05b0ffd7de6ff7444853ca8378e9168d18eeb7a5d06185bdfe195437c8112ffe921e61a08863902da9338f6e2f289043aab9931092b33bb78b3a0cdf7a7ca13742a141e397e7e5eace2941a23ae6dd0e8fae8ef7073cff5ed0ccb96b222d131da45976ef8cd47de359c0637fa65c6485fb44ebea6b86fdf2f7b4c2c513e67d8119c266aa5cb2b489e3780cf43f1fd5a2082c42d47bb195b0de863528e215b9a24ca7fa2c4c2b5d9347fa54a3381fde2dc98c534adcb7b8ce349a51fbbc2818e898b7161bc637d1239027af6d05630aa9eeeb25e608d65526fdf80362"}, {0xdd, 0x8e, "07e37f7874ae76dc82ffeb3b11aa8ad45ca0be1d1545b20b986b6ae4323a9ae2ae9a95ecafe5fef8eb6a54a9072f3c2a9ecab3a684ccf005f836dc6a541ff2e8297e98f77b5cdf6f2293ffda6fb05c7e5fdb054c7df0fe3ba99bda05e9fa8b1bb66d36ed362cd45dd8e3dce710e48c1e36dfaf44b9b092b34961ba5e1fcc1a7e6f4abdb66a6793d09e12e4e3a1d3"}]}, 0x24d)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x20}, @device_b}, 0xa)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000c80)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_b, @device_a, @random="e4680cc31ca4", {0x4, 0x81}}, @a_msdu=[{@device_b, @broadcast, 0x1000, "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"}, {@broadcast, @device_b, 0x54, "2f0d13f8fa33a482762a0e01509f965f3c6f5465f6e048ff861aa37c2f234eebd1f06fd41bab17f63440d8b639d7be9349a411c75e615fc2579cdeea4abd4fe2716e37c79faaa76ef1b6e89f54f807362c4785bc"}, {@device_b, @device_b, 0x31, "6b1fd58674ca289c12d099d29f6b563fd2e67ee3cb36b0c2aa1150ebdac023999e08f13bee41cea1bb9d5fcf82b2c39fb3"}, {@device_b, @broadcast, 0x25, "51c16de4e3162c639b356aa55675098f7247514c9d2446d4bffb656da40d7a82d668e606a6"}, {@device_b, @device_b, 0x69, "51bd68eb778b2547407e63991914ad01b45991b21ce97c4222ac544e2a66b53224b9a70f75cada90169ff6865ad617b408e7122e4c846fc708ee57445307c2e5160e00aa5aed13eb9a5cdcd3676fdc608dc73bef4da96ac3c055edeea50c0bd980732b3153b9f9fcdf"}, {@device_a, @broadcast, 0xa3, "751d3b7eae38d23cf92b52b19e1089c3e76f8525a938244d18d587ee55f1fb8dab6e7bb39890de4d32038766dd4aa543ca45c59667cb35783107ac964725a4ef91f1d97573fa19f145aaf67412a04712e71554ed2952e7047cd596e11319057829f6eec44dc827f51212c4c822942b08096b6f4f7fb33aedb78a79d6e1252103dabc08ab24003a6aad53ae68d58dec9ac5b15f4efe5643d2c9786b3a0ddb003a881afd"}, {@device_b, @device_a, 0xa2, "ac2a96397a55ad9d3ee871c6dc82185b4ace7233bf6c5266ee2339d0e72eff06585275422d4c6ad51e383418094499fe5c081f32f4aaf678d5d0b14600ada5ed82e08a03f369eafe1d886dc96317eece8bb484ba3c0d68382622fbc83141759e3150d84d219f6fb22ea6d35a2f3ec2e8554f67d590ae0db1f149836ba2e78fba33672047e48e2367eb09ef649e7d19956fb08632957ad644d8e74cbbf0a5691bd40e"}, {@device_b, @device_b, 0xeb, "ac1b84379078f418f02a3c3f307be7e4e7bcf22add4995c6df8bbfc2101f3af3db7866d8eb4d8aa33713e444f5833200e934d6af775d25371f0832f5eeb6c15b9e8fdb3a0c272880ab74059349667f01a72c58f0048446cce12279828c237d8af9b6c15d22b8055c69bae37bcb51d7d9252f5002872497e9b520809b90df18a2837eca8a59a4763da40996cb9ac68fca70b0aadd339a85ad511381327005389acf75f03e216eafec253112c92109678c83ffab1f3dc65a1634d74bcdd7300f8a37ceed5947b47041b63f78c1667743a7f946cae3afba6c5e8a46571d58562dd4011573d75f926b4d427cce"}, {@broadcast, @device_a, 0x1000, "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"}]}, 0x23e8)

21:34:07 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5421, &(0x7f0000000000))

[ 1167.970473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1168.037179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1168.050146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1168.059133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1168.088869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:34:07 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:34:07 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r3, r4, 0x0, 0xa0103)

[ 1168.127067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1168.397049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1168.403134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:34:17 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5450, &(0x7f0000000000))

21:34:17 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x0, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:34:17 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0x100)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x2, 0x807d, 0x800, 0x5f, 0x3, "8677ff03cd58a6da"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:34:17 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x0, 0x1, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

21:34:17 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x3}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:34:17 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:34:17 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080), 0x6)
ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000240))
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:34:17 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103)

[ 1178.591947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1178.594285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:34:17 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5451, &(0x7f0000000000))

21:34:17 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = accept(r1, &(0x7f0000000240)=@caif=@dbg, &(0x7f00000001c0)=0x80)
bind$bt_hci(r2, &(0x7f0000000200)={0x1f, 0x4, 0x2}, 0x6)
r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x20)
ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000000))
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x0, 0x0)
getsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000300), &(0x7f0000000340)=0x4)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0)
r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6)
close_range(r1, 0xffffffffffffffff, 0x0)
r7 = fcntl$dupfd(r1, 0x0, r0)
socket$netlink(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000100)={0x20, 0x50, '\x00', 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

[ 1178.737148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:34:17 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x0, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1178.932317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1181.602858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1181.606634] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1181.609944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1181.614868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1181.617330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1183.644850] Bluetooth: hci3: command tx timeout
[ 1185.691621] Bluetooth: hci3: command tx timeout
[ 1187.742715] Bluetooth: hci3: command tx timeout
[ 1189.787659] Bluetooth: hci3: command tx timeout
[ 1209.266148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1209.267278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1209.309656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1209.310794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1209.768315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1209.782186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1209.789533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1210.097957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1210.107432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1210.112206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:35:03 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5452, &(0x7f0000000000))

21:35:03 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x0, 0x0, 0x4, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

21:35:03 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103)

21:35:03 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x200, 0x3, 0x2})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:35:03 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:35:03 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x4}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:35:03 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x0, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:35:03 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@ctrl_frame=@rts={{}, {0x2}}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @from_mac=@device_b, {0x9, 0xf01}}}, 0x18)

[ 1224.529594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1224.533825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1224.563916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:35:03 executing program 3:
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sync_file_range(r0, 0x1, 0x6, 0x1)

[ 1224.619942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1224.647734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:35:03 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x5460, &(0x7f0000000000))

[ 1224.771032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:35:03 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:35:04 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0)
bind$bt_hci(r1, &(0x7f0000000600), 0x6)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r3 = creat(&(0x7f0000000580)='./file0\x00', 0x8)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f00000004c0)="fa3474618a8c00c335ba0d67725e139cbf2bbdb1a83a42f8167169ad7936320a30a9ae812f92dbe1a5e41b179878475f7a82b72e8707d238e886f64858d79131e77dce11ea08beb11c9cc0df562a5213667b7e2fbd0993b299c02bf6b3686e1a5b2e488232e644b3e202ce7f46e52671b82a190bc1baf53c19705eff99208d9e3c314bf80b799376d003b2e201f456f5dd2074acf522188a0ee44a24fd624c57ab2c6bff502c74859453dfd3be305a19accc0e93d0")
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000480)={0xd0, 0x4, 0x4, 0x2, 0x66d3, 0x7})
write$binfmt_script(r3, &(0x7f0000000640)={'#! ', './file0', [{0x20, '/dev/hwrng\x00'}], 0xa, "bc4e7196063a99f73c0c84da6ee4181c0a7ed434d4128b938d25f2015a741d6920eab942022e360b5b96a3a7e1d82db6497de48ae530fc3fc10345c5aa8b4a8aad021481adff388a9a5c0d3c8b291dcc655dbe63"}, 0x6b)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x15, 0x16, 0x1e3, &(0x7f0000000080)="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"})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0xfffffffffffffffc)

21:35:04 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

[ 1225.106664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:35:04 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f0000000000))

[ 1225.213565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:35:04 executing program 3:
syz_open_dev$tty20(0xc, 0x4, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x3, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x6)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x6)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:35:04 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x0, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:35:04 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:35:04 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1b, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

[ 1225.676998] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:35:04 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0xa0103)

[ 1228.462312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1228.468231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1228.470381] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1228.474590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1228.485402] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1228.596567] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1228.601247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1228.602878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1228.607059] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1228.609163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1230.555736] Bluetooth: hci2: command tx timeout
[ 1230.683576] Bluetooth: hci3: command tx timeout
[ 1232.603588] Bluetooth: hci2: command tx timeout
[ 1232.731584] Bluetooth: hci3: command tx timeout
[ 1234.651693] Bluetooth: hci2: command tx timeout
[ 1234.779558] Bluetooth: hci3: command tx timeout
[ 1236.699686] Bluetooth: hci2: command tx timeout
[ 1236.827598] Bluetooth: hci3: command tx timeout
[ 1240.264426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1240.265567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1240.448664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1240.449986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1240.708784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1240.711413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1240.716163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1240.719121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1241.021662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1241.026823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1252.105960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1252.107058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1252.185462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1252.186788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1252.776859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1255.338393] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1255.351268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1255.354470] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1255.363946] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1255.368401] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1257.436689] Bluetooth: hci2: command tx timeout
[ 1259.483593] Bluetooth: hci2: command tx timeout
[ 1261.531582] Bluetooth: hci2: command tx timeout
[ 1263.579588] Bluetooth: hci2: command tx timeout
[ 1281.735472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1281.736904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1281.816116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1281.817594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1282.312265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1282.618665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:36:11 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:36:11 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8902, &(0x7f0000000000))

21:36:11 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x5}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:36:11 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@cf_end_cf_ack={{}, {0xb9}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:36:11 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

21:36:11 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x0, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:36:11 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103)

21:36:11 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[], 0xd)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3)
sendfile(r1, r2, 0x0, 0x68e146a1)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f00000000c0))
fcntl$setstatus(r1, 0x4, 0x44000)
ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, &(0x7f0000000180))

[ 1292.743476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1292.749262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1292.753329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1292.762888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:36:11 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8903, &(0x7f0000000000))

[ 1292.806880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:36:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8904, &(0x7f0000000000))

21:36:12 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103)

21:36:12 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1293.071301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1293.078331] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:36:12 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

[ 1293.146685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1293.147082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:36:12 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x0, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1293.180803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:36:12 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:36:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8906, &(0x7f0000000000))

21:36:12 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x6}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:36:12 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1293.688464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1294.022022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1295.981368] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1295.986657] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1295.989010] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1295.994134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1295.998677] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1298.075622] Bluetooth: hci3: command tx timeout
[ 1300.123641] Bluetooth: hci3: command tx timeout
[ 1302.173639] Bluetooth: hci3: command tx timeout
[ 1304.219585] Bluetooth: hci3: command tx timeout
[ 1323.756475] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1323.758045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1323.822661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1323.823873] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1324.301789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1324.310196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1324.317606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1324.627060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1324.643942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:36:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8907, &(0x7f0000000000))

21:36:55 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x10)

21:36:55 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x7}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:36:55 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:36:55 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:36:55 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0xa0103)

21:36:55 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:36:55 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

[ 1336.728621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:36:55 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

[ 1336.744866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1336.747095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1336.767501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:36:55 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8912, &(0x7f0000000000))

[ 1337.056676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1337.063833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:06 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:37:06 executing program 3:
syz_open_dev$tty20(0xc, 0x4, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x68e146a1)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x68e146a1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r2, 0xc0109414, &(0x7f0000006040)=ANY=[@ANYBLOB="f903000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fd86cc7800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000744b00"/24428])

21:37:06 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0xc}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:37:06 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x0)

21:37:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8940, &(0x7f0000000000))

21:37:06 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:37:06 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@reassoc_req={@wo_ht={{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x77bb}, @device_a, @broadcast, @initial, {0xf, 0x2d}}, 0x6c2, 0x8000, @device_a, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x6, 0x0, {0x40, 0x1f, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x4, 0x7}}, [{0xdd, 0xf2, "5513aaeefdf173780458924af666ba85b2caae1d9b0c65c38d3756c21d1cbe9457af558141c19d0b784ade5b9add7a20e52018fd980eaa300cbef9d98053e2055cd7d0c585772b15f3ec11c84babb022f00a66ce149bb7bae85e970df7996691e8dc09f3d0b9a005336e4f428082125b014c17780e3085a27f4bf9900f52061bc4bc397b8c9b6fdd4440fc47da155031e4adedb2752ead2453ff4c4749270df10f3906ab4a0d36b9b86e4236670427b605eb82eb392075ca313480596f9ace7732ef74404304379f722c6c1bb2cfbf009168e3c160b63911d88966abc3b4fa6915242aeff5628c34d868d198017945f4b1f7"}]}, 0x13a)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000540)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}, @a_msdu=[{@device_a, @device_a, 0x24, "c66ac8c133429b58e196b769fb9983d6d108e5ca8cc3276726f391d018f697761cc8c28f"}, {@device_b, @device_b, 0xae, "1e535e9de7f298dba192fb2a9528d81397cb48cc8bd2a0cb346377f79fec707e6791d84e0fd2f59ffef3fbb489d1316037cbe5a7ad1b69ffba880cbcd68d865c17531a0305739ee70302ac009a33c3afd3bc64b5bc011d3a558cc31bb9c5e479a6b5af5c690b93ab4ded18bb3c49347766736bb4bfc3fbb299701c52f462c36aa3a968425aa3de8c756d69b748adb1e1fe409618c25b9b04e772a3dd8cb0a9d336ddaea904c3c03ce5125592b161"}, {@device_b, @device_a, 0xfe, "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"}]}, 0x21a)

21:37:06 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

[ 1347.927015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1347.930463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1347.940237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1347.949164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1347.961717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1348.055077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:07 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x189800, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x7ff, 0x3, 0xfffffff8, 0x1f, 0x0, "81ce44109840fdb6791da98c31da29ccb855d8", 0x10000, 0x1})
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x20, 0x5, 0x1001, 0x5, 0x3, "893534719fa3a5927425720a795ec768cdcfdd", 0x8, 0xe74})

21:37:07 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8941, &(0x7f0000000000))

21:37:07 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1348.273396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1348.306609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:07 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

21:37:07 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:37:07 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

[ 1348.539636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:07 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x0)

21:37:07 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x7b8e, 0x7, 0x8, 0x7ff})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:37:07 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x894c, &(0x7f0000000000))

21:37:07 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
r1 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x80)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r3, 0x0, 0x0)
ioctl$VT_SETMODE(r3, 0x5602, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r4, 0xffffffffffffffff, 0x0)
sendfile(r4, r2, &(0x7f00000000c0)=0x1, 0x7c1)

[ 1351.403210] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1351.408354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1351.414439] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1351.418889] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1351.421539] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1351.545978] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1351.547316] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1351.548941] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1351.556037] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1351.566380] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1353.435754] Bluetooth: hci2: command tx timeout
[ 1353.627800] Bluetooth: hci3: command tx timeout
[ 1355.484699] Bluetooth: hci2: command tx timeout
[ 1355.677181] Bluetooth: hci3: command tx timeout
[ 1357.531632] Bluetooth: hci2: command tx timeout
[ 1357.723794] Bluetooth: hci3: command tx timeout
[ 1359.579663] Bluetooth: hci2: command tx timeout
[ 1359.771619] Bluetooth: hci3: command tx timeout
[ 1367.779599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1367.780229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1367.857084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1367.858566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1368.114874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1368.418735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1379.068308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1379.069538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1379.218934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1379.220205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1379.775658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1379.780190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1379.784892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1379.789034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1380.097575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1380.106259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.858168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:52 executing program 7:
r0 = creat(&(0x7f00000003c0)='./file0\x00', 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x8)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
creat(0x0, 0x0)
sendfile(r1, r2, 0x0, 0xa0103)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6002, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x0)

21:37:52 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:37:52 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:37:52 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

21:37:52 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xc)

21:37:52 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000))

21:37:52 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x53}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:37:52 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000c80)={{}, 0x0, 0x12, @unused=[0x1ff, 0xdc, 0x7653, 0x2], @subvolid=0x1})
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x10)
write$bt_hci(r0, &(0x7f0000000140)={0x1, @write_voice_setting={{0xc26, 0x2}, {0xf932}}}, 0x6)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="c4000100080d1100000162c0b0d8d3b9e09cc13320c15ce5eb0494af57dbd884338f959048ee9f7394c229c6eb53ca8e18bb83a9cdb6e9812d9bc4cffb5cd00c"], 0xa)
syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000000300)=ANY=[@ANYBLOB="d0147200ffffffffffffffffffffffff5050505050507c000f01c6600106360394b6050372060303030303032d1a020015242500020000000003000800160000000008c802000002"], 0x48)

[ 1393.893003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:53 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x89a0, &(0x7f0000000000))

[ 1393.922883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.929277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.938824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.943410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1393.951796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:53 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x89a3, &(0x7f0000000000))

21:37:53 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:37:53 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}]}, 0xaf)

[ 1394.205999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:53 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:37:53 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:37:53 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x40049409, &(0x7f0000000000))

21:37:53 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r1, 0x0, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x2)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

[ 1394.443096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:53 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000040)=@mgmt_frame=@deauth={@wo_ht={{}, {0x40}, @broadcast, @broadcast, @random="7002bb8144a9", {0x2, 0xff}}, 0x6, @void}, 0x1a)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000080)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b}, @a_msdu=[{@device_a, @device_b, 0x64, "239e6a9b7c8c31683313541dae70bc3364dd82ef6f0bddd27a9b5304baf934e13f47c001c3bb43445d35788000b81651f4ac4df8acf16b826ee5b766b7501407d54545fc4256e8421b70023308fea5d016093ae099a839e7a85fc89d7e16958dc1db00d7"}, {@broadcast, @device_a, 0x31, "6ac743bb8bfc48f6d0909a846bfd19893ee768d577a656c3d429a837b9c1b6dc7ccccbbf6d627178203d5481445e5558df"}]}, 0xd2)

[ 1394.464295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:53 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:37:53 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:37:53 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1394.630744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:53 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x40086602, &(0x7f0000000000))

[ 1394.653790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1394.677536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1394.722952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:53 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x40087602, &(0x7f0000000000))

[ 1394.757330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:37:53 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r2, 0xffffffffffffffff, 0x0)
write$bt_hci(r2, &(0x7f0000000080)={0x1, @change_conn_link_key={{0x415, 0x2}, {0xc9}}}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x2fffffffffffe, 0x100})
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:37:53 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xc)

[ 1395.053663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1395.102239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1395.102769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1397.676665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1397.680207] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1397.683085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1397.690076] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1397.694574] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1399.772691] Bluetooth: hci3: command tx timeout
[ 1401.820040] Bluetooth: hci3: command tx timeout
[ 1403.868020] Bluetooth: hci3: command tx timeout
[ 1405.915646] Bluetooth: hci3: command tx timeout
[ 1425.534896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1425.536269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1425.568800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1425.570097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1426.126427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1426.138994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1426.147917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1426.157171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1426.465405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1426.473893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:38:37 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x2}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:38:37 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x401c5820, &(0x7f0000000000))

21:38:37 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:38:37 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x3)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:38:37 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}]}, 0xa6)

21:38:37 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:38:37 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x7b8e, 0x7, 0x8, 0x7ff})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:38:37 executing program 2:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000080)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=0x0, @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRESDEC=r1], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)

[ 1438.959433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1438.973807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1438.974327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1438.985892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:38:38 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
linkat(r2, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x1000)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r4=>r0}, './file0\x00'})
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x402080, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000001c0)={0x5, 0xffffffff, 0x3, 0x0, 0x0, [{{r4}, 0x53}, {{r5}, 0x1d5}, {{r6}, 0x7f}]})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:38:38 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x7b8e, 0x7, 0x8, 0x7ff})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:38:38 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x4020940d, &(0x7f0000000000))

21:38:38 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x80086601, &(0x7f0000000000))

21:38:38 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:38:38 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x7b8e, 0x7, 0x8, 0x7ff})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:38:38 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1439.289189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:38:48 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@ba={{}, {0x5}, @device_a, @device_a, @multi={{0x0, 0x1, 0x1, 0x0, 0x8}, [{0x0, 0x7, {0x9, 0x1}, "11bb1f4d2255b28a"}, {0x0, 0x5, {0x5, 0x9}, "8d21aaaf92bdf6fa"}, {0x0, 0xd, {0x5, 0x3}, "6cbe73b58951190e"}, {0x0, 0x2, {0x5, 0x40}, "5d398ba21ff12166"}, {0x0, 0x5, {0xc, 0x7}, "1084ec2ee91e41ab"}, {0x0, 0x7, {0x4, 0x3}, "f76dcaf0d59563d4"}, {0x0, 0x2, {0x3}, "0bec965bbc8b22b8"}, {0x0, 0xa, {0x2, 0x20}, "ca06f559c851dd01"}], {0x0, 0x1, {0x7, 0x3}, "7ef34b0f1e40c101"}}}, 0x7e)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@mgmt_frame=@action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1ab6}, @device_b, @device_a, @random="f28d8b0cb886", {0x9, 0x5}}, @tdls_chsw_resp={0xc, 0x6, {0x52, {0x65, 0x12, {@initial, @device_a, @broadcast}}, {0x68, 0x4, {0x3, 0x8}}}}}, 0x36)

21:38:48 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:38:48 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:38:48 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x3}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:38:48 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x7b8e, 0x7, 0x8, 0x7ff})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:38:48 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:38:48 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x80087601, &(0x7f0000000000))

21:38:48 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/247, 0xf7)
r1 = fcntl$dupfd(r0, 0x406, r0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="2329202e2f66696c65300a48cb1405678fc350ec72f65f2f7b474bd5cfba9833f9d64a3a347f35f942faba37131d46892c4a431c5ff5c4810db8e5d7d3ca1f9737a4a9ce9a7a14164c2f98880b5dbd2fc07cd358d8c39893371dac47f44c0573fc926f8b698a8ddd9c9f92b7dafbf3771bc803079eb6d3c52e28dd971e2472b38667cac2de689121c7c5c551ef282391aa29b53354d7d38392988c4b5836cc3a4c6d078476d217aff4edc10148d23c7222b63c428a359afe7aee149cb9b163474a76047fb3c097d67271ecb8f57c94"], 0xd)
sendfile(r2, r3, 0x0, 0x68e146a1)
fcntl$setstatus(r2, 0x4, 0x44000)
r4 = open_tree(r2, &(0x7f0000000180)='./file0\x00', 0x80100)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r5, 0x0, 0x0)
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r6, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r6, r7, 0x0, 0x68e146a1)
sendmmsg$unix(r1, &(0x7f0000000380)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000240)="5c0b84e20fc35c24b8c750701690db530250fde2067d6f594d61321258e04d4f92154eb27fab1f56c89c2fe239311a3dbba494da45ac3ad5c5f1f130969be046f1839fcf842ecd7bafa7197ccfbd3f436ae033525361688010285811f8b037f5611c5a715ce5b4994c1fdcf7a65b03052ffb03842344ef7965b942441a1fa06767c13f0ae18ddc8bf1fc21ecf7334682e3b6c4f892c256dc615274c39fe83b4380f2645e73295f130b760b5a014c52b261ad2cbd478569442025115150e16a7aac5c3172a32d3173bc78ed6308a48384e981f595ff63acee6a2f52437bd830811cbed705250786209d017aac9d2b0ed51b54ca74", 0xf4}], 0x1, 0x0, 0x0, 0xff29dd28bc89d04}}], 0x1, 0x4000)
fcntl$setstatus(r6, 0x4, 0x44000)
ioctl$VT_SETMODE(r4, 0x5602, 0x0)

[ 1449.445171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:38:48 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1449.482239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1449.668951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1449.752388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1452.465308] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1452.470807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1452.473455] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1452.481222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1452.488432] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1454.556623] Bluetooth: hci3: command tx timeout
[ 1456.603555] Bluetooth: hci3: command tx timeout
[ 1458.651884] Bluetooth: hci3: command tx timeout
[ 1460.699569] Bluetooth: hci3: command tx timeout
[ 1473.884415] Bluetooth: hci2: command 0x0406 tx timeout
[ 1480.270579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1480.271723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1480.348986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1480.350118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1480.799318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1480.804839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1480.809865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1480.814525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1481.118916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1481.125244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:39:31 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x80108906, &(0x7f0000000000))

21:39:31 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:39:31 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:39:31 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x4}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:39:31 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x7b8e, 0x7, 0x8, 0x7ff})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))

21:39:31 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8941, &(0x7f0000000000))

21:39:31 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000))

21:39:31 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1}, {0xc4}, @device_b, @from_mac=@broadcast, @device_a, {0x4}}, {0x3, 0x1, 0x3, 0x0, 0x8}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x7ffb}, @initial, @device_a, @random="412f0bc62eb9", {0x3, 0x6}}, {0x0, 0x1, 0x2, 0x1, 0x55}}}, @a_msdu=[{@device_b, @device_b, 0xe5, "9b5e317cab44b1591f421985e56b35f8a929e6a88a828a87ebf3df923c734a95e725fe96eb38ebcd7fd0dc9e459fc8feb53796cf117f869e9f87a7470e8269366fc0ad37cf6c3fd5d0d2de92ed66702329f8fa334fc4428c07b7e24ec2cd5d229cb85f8b8800be8e62a15a4a2144e377473d41162350a1394e083185867209795ba774c96a6b2f27c2bdb6129c3f8f917702fadf4928deb836b3b9b1e83716fc59cb6b5251381308a2e4fc393a0e9b7544426abdd8fb438c0b2ebaffbb5f4aba0c76fe84e03060ed5a6d0f3267842270fd6904c9f0911d9be151f03bf3c9c36bfed08ea11a"}]}, 0x128)
syz_80211_inject_frame(&(0x7f0000000180), &(0x7f0000000280)=@ctrl_frame=@ack={{}, {0x4}, @broadcast}, 0xa)

[ 1492.238712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1492.329506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:39:31 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4007, @fd_index=0x8, 0x4, 0x8, 0x1, 0x8, 0x1, {0x2}}, 0x9)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r3, 0x0)
syz_io_uring_submit(r4, 0x0, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4007, @fd_index=0x8, 0x4, 0x8, 0x1, 0x8, 0x1, {0x2}}, 0x9)
r5 = syz_io_uring_complete(r4)
r6 = pidfd_getfd(r5, r1, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x8)
ioctl$VT_SETMODE(r5, 0x5602, 0x0)

[ 1492.385949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:39:31 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x80108907, &(0x7f0000000000))

21:39:31 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x7b8e, 0x7, 0x8, 0x7ff})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))

[ 1492.430805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:39:31 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x189800, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x7ff, 0x3, 0xfffffff8, 0x1f, 0x0, "81ce44109840fdb6791da98c31da29ccb855d8", 0x10000, 0x1})
r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0)
ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000000c0)={0x20, 0x5, 0x1001, 0x5, 0x3, "893534719fa3a5927425720a795ec768cdcfdd", 0x8, 0xe74})

[ 1492.487199] scsi_io_completion_action: 1 callbacks suppressed
[ 1492.487302] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1492.490201] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1492.491844] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1492.493199] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1492.494317] blk_print_req_error: 149 callbacks suppressed
[ 1492.494331] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0
[ 1492.496889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.497814] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1492.499013] buffer_io_error: 222 callbacks suppressed
[ 1492.499027] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1492.525690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.526578] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1492.527786] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1492.548838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.550462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1492.552268] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1492.553573] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1492.582736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.583672] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1492.585601] Buffer I/O error on dev sr0, logical block 3, async page read
[ 1492.622804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1492.624840] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1492.626320] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1492.627519] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1492.629005] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00
[ 1492.630256] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0
[ 1492.631525] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1492.632691] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1492.633908] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1492.635057] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1492.644693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.645909] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1492.647365] Buffer I/O error on dev sr0, logical block 0, async page read
21:39:31 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x5}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:39:31 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x80111500, &(0x7f0000000000))

[ 1492.706607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.707587] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1492.708768] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1492.738174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.739627] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1492.756015] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.757809] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
21:39:31 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1492.806763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.813785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.819461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.829793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.851336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
21:39:31 executing program 6:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x300, 0x9, 0x2}}, @void, [{0xdd, 0x6b, "7225b8febf264ac011996bfe5f259cb1b55c703f160f5435794eaf8ddd4470b1fdb9fdf42cc9cabc6a0c52070dfda408e041b2115a0125d3017497d20731d75b2016ddfc72c3dfa2d33c03e82236d16b181799b8aee6fe33dde2dcd64bc82c72737adafea3da87aba3450b"}, {0xdd, 0x7, "f7f76be47dd3b7"}, {0xdd, 0x76, "d70264756782b8f170a98c11d24816e51c256d0228354ccc3b52b43c42f2c4563792005350ac60ed1c0f75dcc5201fac78bd417c3c27cf6b07c8089385946f4d607f8ea87dd30b4bd7fb4a1db71d5799bdbaa1e2df538740e35efd0cee21f479ab7a054b85c631e251ac617d08a11984704af1a2262d"}]}, 0x127)

21:39:31 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x7b8e, 0x7, 0x8, 0x7ff})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))

[ 1492.871953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.899993] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.910270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.919234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.930907] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
21:39:32 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1492.952367] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.956790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1492.967433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1492.979062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.000605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.018668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.025245] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.033008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.043994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.051221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.055359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.065834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
21:39:32 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x801c581f, &(0x7f0000000000))

[ 1493.087824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.093854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.102101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1493.108817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.116457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.131264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.138816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.144775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.146034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.147227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.175655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.196270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.209824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.211342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.215717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.223635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.234846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
21:39:32 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x7b8e, 0x7, 0x8, 0x7ff})

21:39:32 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1493.243802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.268833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.270716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.276352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.278200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.289855] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.292916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.294237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.318869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1493.322876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.341114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.364634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.365380] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.370554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.372902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.393748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.399624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.402632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.403326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.413863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.445163] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1493.446790] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1493.447813] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1493.448795] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00
21:39:32 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x80811501, &(0x7f0000000000))

[ 1493.485698] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1493.485811] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1493.485925] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1493.486030] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00
[ 1493.492617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.492887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.493053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.493201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.493349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.493522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.493732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.493900] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.495371] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.495931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.496427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.508238] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.537721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.547299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.553014] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.555976] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.557089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.557744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.558344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.564089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.572191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.580262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.580925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.595343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.596598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.597208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.604205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.605175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.606188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.607767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.608334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.611658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.615832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.617967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.625135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.629813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.632168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.633321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.636756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.639339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.643441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.657021] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.659370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.670123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.671068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.672829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.674065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.679698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.680805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.684138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.687647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.688738] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.694671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.696331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.696910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.698597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.699155] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.702596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.703151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.705970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.706608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.707797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.708357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.715693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.716258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.717323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.718398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.720768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.722816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.723435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.725595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.726154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.728616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.729188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.734596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.735171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.738579] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.740224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.741540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.744599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.745169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.745897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.746992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.748636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.749205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.752897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.753518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.757600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.758163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.759921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1493.780309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1495.922402] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1495.927981] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1495.930229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1495.934181] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1495.936936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1498.011936] Bluetooth: hci3: command tx timeout
[ 1500.060644] Bluetooth: hci3: command tx timeout
[ 1502.108563] Bluetooth: hci3: command tx timeout
[ 1504.155717] Bluetooth: hci3: command tx timeout
[ 1523.694298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1523.699301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1523.744597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1523.745845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1524.356077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1524.366106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1524.375439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1524.384062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1524.393125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1524.702295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1524.707590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1524.713017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1524.756878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1527.353832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1527.359586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1527.362564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1527.370061] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1527.374012] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1529.436179] Bluetooth: hci3: command tx timeout
[ 1531.484561] Bluetooth: hci3: command tx timeout
[ 1533.532762] Bluetooth: hci3: command tx timeout
[ 1535.579791] Bluetooth: hci3: command tx timeout
[ 1555.416607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1555.417728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1555.570772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1555.571898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1556.080065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1558.638864] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1558.642961] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1558.645179] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1558.653913] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1558.658009] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1560.731608] Bluetooth: hci3: command tx timeout
[ 1562.779546] Bluetooth: hci3: command tx timeout
[ 1564.827565] Bluetooth: hci3: command tx timeout
[ 1566.875561] Bluetooth: hci3: command tx timeout
[ 1585.720818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1585.722031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1585.798563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1585.799774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1586.275333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1586.293503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1586.303260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1586.312146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1586.319496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1586.629086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1586.636070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1586.641456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:41:16 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:41:16 executing program 2:
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x39}]}, 0x64}, 0x1, 0x0, 0x0, 0x41}, 0x20004041)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000280)=@ctrl_frame=@cf_end={{}, {0x94}, @device_b, @from_mac}, 0x10)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000300)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_a, {}, @device_b}, @a_msdu=[{@broadcast, @broadcast, 0xe2, "e36119240dafd98556950f78534978170395c0416515a443cec54d44ace0bddf4582c5ab5c0fd55d78fa9be2939f6819dcb7e4b0073a255902ae7eca4dd33b4fdfa83fa082df8b8096d16ed697da4471caedf6292fa980582fd7ccd27a6bf00ab0f69cbdf3617f9e863bca79df18545ac4c0abbc9da0bd532bdb943d3e0c106f168fbfa9a92ecfe2987d60b0db14f5c46c1313404ccde4459aade5b262394b18cfece60610472b19475875c9ae04da890dbada98f8deebfc2fdb13710c092a0b32c4254967e59e6c19567aa35662d73e237feeead91321317605187ea25d6498dc00"}, {@broadcast, @device_a, 0xb5, "fec41d8c4218a482c16171d1e537834fa2fa6eccc797e20a5667df449b698ee4a2cf559527e5c32a008a72c60822b76fc4bef17cbf0111cc295833a1866f1fc9a4c402a70a1395da891e649e33325a2e7cc8015da3e98a514abbc0c9745763b8c6b7858ab1113bb8d6ad1125eae43438aac3b0575441ccd2ed9bb09581abb9306b4c0e690946c401d730af8c88f6df2efe6e63da1019a8170a915b90bc3b233f5cdbd322a3c0a743802fc3c78e16e903a0b4770f4e"}, {@device_a, @device_a, 0x1e, "bd664763048e59ebfc7cfba77fbf5be8d02f786e07cfd68ebba2a2970e91"}, {@broadcast, @broadcast, 0xfe, "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"}, {@broadcast, @device_b, 0x6e, "5dca861b82b063ec40e3730b6e9fa6ed4315999e9fa6f4859915725137be8578a5de8a80442bd7a96163545daa04f8fc6605cae3193b01d028aa4a4f631885e95aaf598b05cc2b3e2781de642787cc773f35e4267a9151edcfdbf2afcb0a693695958a83de5f834656a7587915cb"}, {@broadcast, @device_a, 0x2e, "2ccecded5d59ca7a0990c73ab803f05d282bdeea1cf1ca1371a45b330708c1e54b0078e89364a2470c0fe0d498fb"}, {@broadcast, @device_b, 0x8c, "e38ba80effce58ea0a827781bc922abc69e43c0a25e2611a60f4c102d9a466abc48dc2abf8298d43c64906a857ae2ff801cc7db48bea63faaf2834c7940cafac2fd2a4344e59487ea64c2d4bc9778f72fb4859b2a1353b303df133962cd2953a1448fbbc6bf5e34bfe85dcc1a497342ac76d7d9c732f4692de02c916383c5e46e974b55cdc016720c2252c1c"}, {@device_b, @device_b, 0x90, "62f666c8aab762395de4f9e2007263d996eaa15822b95732ef14a4fd52f09997484d067652dc4dc19e067ca0977e0a9014d6a0776982646216ca6065fea265c454d28774058f8dcc971358fa0e30e28726abc1a21c4b635fda929bc5462578dff9b021bdf9bd52206b8dd8be2f6d72e215ff60ca076cd7da5c14a8dbdfe9be8dc00bf5374ab668993d5b9826ad2c1bef"}, {@device_b, @device_a, 0x23, "dfe2681b5933c5a714130cc13b1dcf4f18d00ef35119618911ec8c6cf5c4cfee59ddda"}, {@device_b, @device_a, 0x7f, "1f665dc53acacb0a6b6a80f30638368d017474144956d2cbb4a49dcc8b2d3d22cce942bc98de5ba2f117538daf88a57fe7071247b6ecbb2ff3a80a26a70f1f0d24b4a8b35a3d0c9e24c0266f098a5d974f699401f24e64021a5820c4e720e5a7c3317685d3a4a3c80f458e89dea04ddf2b18d4a0fc8388307981c07bf4afe2"}]}, 0x5c2)

21:41:16 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x6}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:41:16 executing program 3:
unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x68e146a1)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x7, 0x19, "2218c918fc219ec6"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x200, 0x0, 0xd5f1, 0x0, 0xd, "93730d527ee1dc18"})
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:41:16 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0xc0045878, &(0x7f0000000000))

21:41:16 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:41:16 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x7b8e, 0x7, 0x8, 0x7ff})

21:41:16 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8903, &(0x7f0000000000))

[ 1597.452119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1597.467311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1597.482547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1597.507311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1597.509093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:41:16 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0xc0045878, &(0x7f0000000000))

[ 1597.823319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1597.831719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1597.850065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1597.863890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:41:30 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40)

21:41:30 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x7}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:41:30 executing program 2:
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010102}, 0xc)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=ANY=[@ANYBLOB="82"], 0x74)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_b, @broadcast, {0x5, 0x80}, @broadcast}, {0x8, 0x1, 0x0, 0x0, 0xff}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x3}, @device_b, @initial, @initial, {0xa, 0x5}}, {0x3, 0x0, 0x0, 0x1, 0x6}}}, @ver_80211n={0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu}, 0x3e)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f00000000c0)=@ctrl_frame=@cts={{}, {0x3f}, @device_b}, 0xa)
syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000300)=@mgmt_frame=@reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_a, @device_a, @initial, {0x0, 0x4}}, 0x1800, 0x42, @default, @void, @val={0x2d, 0x1a, {0x8000, 0x0, 0x6, 0x0, {0x3b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3}, 0x8, 0x7, 0x4}}, [{0xdd, 0x46, "73e9a3296d00a97bde4fd3600326480ef4fa3ca9c9c870d0697131118308ec190e7ed4b0b76a122cd315be710427a4b940bb693cb11a2f6e83171725d972b1707b80f8f15e02"}, {0xdd, 0x29, "df52b720a405f7953bd197abd483e089e91e6c0c3d16cfdc3704677323eb7bedb26413300f95fcda26"}, {0xdd, 0x46, "de05f495e1f90e49cea5baf0d4677ef3fed7050a40545b1651583dad7e7207a2c4d8159d0a45defd746ebd6aa8e1a35e94c0be48ee22343fa7825f5d9a469f6212cd21b0673a"}, {0xdd, 0x4c, "cc2a84e9813e4dec5cee5e5401cf1cebe281460289c861646823cf31da4c4ce5bbd77deac0ec16d4aeee8f7ccb96025162c89b4f699f8f3bc82c70725e04de0672a746b712270342e0656d78"}, {0xdd, 0xa3, "b31fd47d005d4688a2a617c400906ca1624986d05819e47c09539f9af6b1111c417f2105b0fdca74419c89748d3ac94e1c6340ed60c6f9029f9ef746035c30b9b2e76d60d9e7107831a51d13ec89745eddab24daecc2fa78c09198867e30edcf55d12c55f2a055eb66acde7142a5f6643bc7b75b0f220ec8c0f2712a4a8b9b43f579e856ee00546041fef2a36009d8b3a4fbdd9f82100ff96df7270b7f77032a3b4cbc"}, {0xdd, 0x15, "0cc23f10bc7c71ec87ef48661e4b283fb9ee1dc3e1"}, {0xdd, 0x56, "7997e376ad8e5b11cd2ae7e261579c38fb1b48f9f313747d0e75c37ec4c4beced42a8405024c8ec5436b85a8414f644acb7b56b10b0a4e1273b1addf69822ce25040737b8801e924053b4aa6423cd3c365eb4c634446"}, {0xdd, 0xe9, "006a4f82e433b9f8b8180339642ffcfba48aab31126ead4254922899cbff5d9e10460bbbeeda7f8e8b675e60e97acd4863b2d1786c6b86dae34bde5a570403551021ac846ce74d8d9aa6eb9f1e16968bc2e891fa0ab790b4f6bc6edfaa29a357bffd937ff32fb4aa1e08f50773c44bd328f72e7688426f650ef565f4694fe05f56ddb7b6d2f618297cb89b9119711abbe37d4e801029ec8440410b29f4f455572fadbafd6ee0841d9685444145455d3997f41159c3312bb8483c9d6682f5d904cc02ededa1abf84f4c7385a772857b1fd34ed81ccf0a9ccc4999416fab2e3123d82b44f13072988a72"}]}, 0x342)

21:41:30 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:41:30 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8903, &(0x7f0000000000))

21:41:30 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000000))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00')
read$char_usb(r1, 0x0, 0x0)
ioctl$VT_SETMODE(r1, 0x5602, 0x0)

21:41:30 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0xc0189436, &(0x7f0000000000))

21:41:30 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1611.120375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:41:30 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0xc020660b, &(0x7f0000000000))

[ 1611.196005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1611.238443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1611.279101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1611.323079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:41:30 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8903, &(0x7f0000000000))

21:41:30 executing program 7:
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/40)

21:41:30 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x280000, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
ioctl$VT_SETMODE(r0, 0x5602, 0x0)

21:41:30 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x18}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x100}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x50}}, 0x8000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1f}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x40080)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r3=>r1}, './file1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7fff, 0x2c}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x114}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x23a}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000140), 0x800, 0x340000)
sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40880)

[ 1611.434320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:41:30 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1611.494522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:41:30 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x9}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:41:30 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:41:30 executing program 7:
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/40)

[ 1611.725243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:41:30 executing program 6:
syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1}, {0xc4}, @device_b, @from_mac=@broadcast, @device_a, {0x4}}, {0x3, 0x1, 0x3, 0x0, 0x8}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x7ffb}, @initial, @device_a, @random="412f0bc62eb9", {0x3, 0x6}}, {0x0, 0x1, 0x2, 0x1, 0x55}}}, @a_msdu=[{@device_b, @device_b, 0xe5, "9b5e317cab44b1591f421985e56b35f8a929e6a88a828a87ebf3df923c734a95e725fe96eb38ebcd7fd0dc9e459fc8feb53796cf117f869e9f87a7470e8269366fc0ad37cf6c3fd5d0d2de92ed66702329f8fa334fc4428c07b7e24ec2cd5d229cb85f8b8800be8e62a15a4a2144e377473d41162350a1394e083185867209795ba774c96a6b2f27c2bdb6129c3f8f917702fadf4928deb836b3b9b1e83716fc59cb6b5251381308a2e4fc393a0e9b7544426abdd8fb438c0b2ebaffbb5f4aba0c76fe84e03060ed5a6d0f3267842270fd6904c9f0911d9be151f03bf3c9c36bfed08ea11a"}]}, 0x128)
syz_80211_inject_frame(&(0x7f0000000180), &(0x7f0000000280)=@ctrl_frame=@ack={{}, {0x4}, @broadcast}, 0xa)

[ 1612.005257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1612.059883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1612.062728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1612.135636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1612.166778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1612.186619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1614.958091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1614.964704] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1614.968387] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1614.981847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1614.985364] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1617.051687] Bluetooth: hci3: command tx timeout
[ 1619.099644] Bluetooth: hci3: command tx timeout
[ 1621.147592] Bluetooth: hci3: command tx timeout
[ 1623.196598] Bluetooth: hci3: command tx timeout
[ 1642.692911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1642.694059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1642.778198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1642.779460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1643.374456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1643.387374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1643.396387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1643.411501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1643.420446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1643.428500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1643.737060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1643.742195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1643.747040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:42:14 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(r0, 0x5602, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

21:42:14 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:42:14 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))

21:42:14 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:42:14 executing program 6:
syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1}, {0xc4}, @device_b, @from_mac=@broadcast, @device_a, {0x4}}, {0x3, 0x1, 0x3, 0x0, 0x8}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x7ffb}, @initial, @device_a, @random="412f0bc62eb9", {0x3, 0x6}}, {0x0, 0x1, 0x2, 0x1, 0x55}}}, @a_msdu=[{@device_b, @device_b, 0xe5, "9b5e317cab44b1591f421985e56b35f8a929e6a88a828a87ebf3df923c734a95e725fe96eb38ebcd7fd0dc9e459fc8feb53796cf117f869e9f87a7470e8269366fc0ad37cf6c3fd5d0d2de92ed66702329f8fa334fc4428c07b7e24ec2cd5d229cb85f8b8800be8e62a15a4a2144e377473d41162350a1394e083185867209795ba774c96a6b2f27c2bdb6129c3f8f917702fadf4928deb836b3b9b1e83716fc59cb6b5251381308a2e4fc393a0e9b7544426abdd8fb438c0b2ebaffbb5f4aba0c76fe84e03060ed5a6d0f3267842270fd6904c9f0911d9be151f03bf3c9c36bfed08ea11a"}]}, 0x128)
syz_80211_inject_frame(&(0x7f0000000180), &(0x7f0000000280)=@ctrl_frame=@ack={{}, {0x4}, @broadcast}, 0xa)

21:42:14 executing program 7:
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/40)

21:42:14 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0xf}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:42:14 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x404c534a, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000003c0)={0x220, @time={0x9, 0xd3}, 0x3f, {0x7f}})
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000300)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0xf, 0x67}}, @random="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"}, 0x90e)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:42:14 executing program 7:
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/40)

[ 1655.785075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1655.826416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:42:14 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000040)={0x5, 0x78b5af26, 0x800, 0x80000001}, 0x10)

[ 1655.839062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:42:14 executing program 7:
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/40)

[ 1655.854290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1655.861173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1655.864605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1655.876963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:42:15 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x1ca40, 0x0)
ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000540)={0x1, 0x1, 0x7, 0x20, 0x13c, &(0x7f0000000080)})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000580)=0x8)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r2, r3, 0x0, 0x68e146a1)
fcntl$setstatus(r2, 0x4, 0x44000)
ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000480))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x54000, 0x0)
ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000500)={0xdc00, 0xffff, 0x80, 0x3})

[ 1655.960156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1656.008111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:42:15 executing program 4:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
inotify_init()
r1 = openat$cgroup_pressure(r0, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0)
sendfile(r0, r1, 0x0, 0x100000007c)
write$selinux_attr(r0, &(0x7f0000000040)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r2, 0x0, 0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000100))
pipe(&(0x7f00000000c0))
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000))

21:42:15 executing program 7:
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000000)=""/40)

[ 1656.104598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:42:15 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x11}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:42:15 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:42:15 executing program 6:
syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1}, {0xc4}, @device_b, @from_mac=@broadcast, @device_a, {0x4}}, {0x3, 0x1, 0x3, 0x0, 0x8}}, {@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x7ffb}, @initial, @device_a, @random="412f0bc62eb9", {0x3, 0x6}}, {0x0, 0x1, 0x2, 0x1, 0x55}}}, @a_msdu=[{@device_b, @device_b, 0xe5, "9b5e317cab44b1591f421985e56b35f8a929e6a88a828a87ebf3df923c734a95e725fe96eb38ebcd7fd0dc9e459fc8feb53796cf117f869e9f87a7470e8269366fc0ad37cf6c3fd5d0d2de92ed66702329f8fa334fc4428c07b7e24ec2cd5d229cb85f8b8800be8e62a15a4a2144e377473d41162350a1394e083185867209795ba774c96a6b2f27c2bdb6129c3f8f917702fadf4928deb836b3b9b1e83716fc59cb6b5251381308a2e4fc393a0e9b7544426abdd8fb438c0b2ebaffbb5f4aba0c76fe84e03060ed5a6d0f3267842270fd6904c9f0911d9be151f03bf3c9c36bfed08ea11a"}]}, 0x128)
syz_80211_inject_frame(&(0x7f0000000180), &(0x7f0000000280)=@ctrl_frame=@ack={{}, {0x4}, @broadcast}, 0xa)

[ 1656.256285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1656.301819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1656.326181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1656.338237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1656.347248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1656.350238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1656.354136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1656.385697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:42:15 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:42:15 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={<r1=>0x0, 0x0, <r2=>0x0}, &(0x7f0000000080)=0xc)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000001700), 0x0)
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001740), 0x20200, 0x0)
r7 = epoll_create(0xffffffff)
socketpair(0xf, 0x1, 0x7fff, &(0x7f0000002c00)={<r8=>0xffffffffffffffff})
r9 = openat2(0xffffffffffffffff, &(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)={0x8220, 0x9}, 0x18)
r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r10, 0xffffffffffffffff, 0x0)
r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000002cc0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000002d00)=0x1c, 0x800)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r12, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d80)=[{{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000000180)="3644486209aac9d1074349", 0xb}, {&(0x7f00000001c0)="8c579240db272d0a97803f9560e4193d4c250e18cfcb4fc1a2b388b9c3af38746eb28498b5fbf2e953e67dd3bc2e265bbefed09c126665808d81afd6ba4e8116b0abd6fbd45ff1f43da34446a2152d0ea4de7ad1d8cf51fbbddeeb4ca930a09c57b03fc3a057a7fa4983b333c1ffaac61f3838fc3751dd42ace43d7972f7711751c519aa6221c107bbc01dfea9c9003ddbf9265a9113bc1f46eef202", 0x9c}, {&(0x7f0000000280)="0a04a0ba54d2820e3cf362d69c405b17f46e63062da52515f26f4a4685", 0x1d}, {&(0x7f00000002c0)="7b1cd9bca886f817a0fe427c1811549e5d85aa63a0cac9496cc8bfb4b570360ec83c4aed22936308559691d37ecfc171c5209df83917b41ccc3746b4a0687ecaaaf0c9c280eebad3975985e8852095554292c50698a57c09966f4b7d0adf0be40dc858689092030c79f46e710ef732859326fa5080029db987a7165bc65c2c413532260f9cb065b0ae81806b35660da625985a436b62a078a5be1a827ecd34f30d2cdddba1c5a6dd781e81619d3505967526ce3928650588", 0xb8}, {&(0x7f0000000380)="a674d4c77b5fd4eca92df0d80fa149dacb4aa13b1e27c9ce7b0547a65e019d92a58b7e25f80ba085804c0bc4698a04f5890438618f22ba8b14a6cc0ea4d6f4acfb5e0753a9f63c972685702af8580f3ac62ccdc3caec83c1bcae01ce8fbfc340da8ef7db559b1c96ffe486e377846f5267d39bbe8e4af3b7dbfae733595c22911bdabf921a16bb60f5e745f4f2239845671eecf87dcda24bed458ac0f1ca17918be26338c5653821", 0xa8}, {&(0x7f0000000440)="dec1f85ce05f150f0efd27e245b6b43100eb40988153a88577a5495fa1021c0ef9ea743ad7342824500ec340686b57feb90f7a7f88c4b5d31aa9327c2b9a1f928fab1025feafe363e77240333bf5ab6d1567802ca63a244c6d7a0428ab67ee2357eedb2a7f7b62a2fa23395ea588bc9455589c23f9b086992252cfd2a0c95064399a9ba5e2d847a0ac349cea1a57581c5dc02669f0413334d8fde6d2f94eb5fd7308ee5aa7dfbd5db11ac82f74935ed64d6ca53c4db339243fda1cb29d6b1ed0c3d54b80e13f8457f719309542f091f84203be726154160db8c992eaad0cae7cf66f4dbef82e5c36d7868879c18e9b0d5ae7626edecbca8da4739aa75ff3743da261ef0c93a99d3702954b109bc1aa16e74a89b81196d04c1dd73972cf674a183a5681d16bff2369f73cc6e758da19d12bc621baef789ca6effafe8c03e85a12d2506900680ee44a295c3cf883c3409b9b251a5ca3088fef48f53a999bcb88ae798e5bee9db53256d201a0fe792b6a8cdddf95f28645d88fe43055606d4138214504da1c8e2e17934048ea2a160b2bf0dcde59b52861a67c94ba617ac6bc1cfff9d5dea8ca8d7638ca4e24b50c22b4ba85b70a97001cb484d910eeb5d9a28336e5efb67f089755744366a4ea2da2b3c52ec473dd256cbea94f03b9b6168ffc5661cd07b3fc658c779ddb831dfe54d8bc21cd63f9ba5635afdfcdc320a046ffc605b3f79d340b988d5891f75b630ef543cd622430e721a1788c9eb2e11080488e8e6bbadc1fe4328edb67caf14dca4f7d71967813ec45bfb6830df826dd3f1f0ec44f5e67210e649424bd9d497a49731a049c67fa8c4b721c108e955dd9d0611e5d9482fbbbb9179dec70d8804f50fd8899ba26dd42453ba9fc1c61420095396376511a6d27ae6a289da871bdccc440f131c08362e14402313c73c515c5369eba9ced0457650bc48eefd4ed9d6f712931667a0185e3efdae4b3cf76cf1cfa460ba860e2891362bfafa8136f943d9537d98f8213af308e3178c6123944b47d06ec5fca6955b66c0d6adeeceed40e6fab5a168836f8f42f9a657584ae7d6cb3514bc50f270bd977b4e6c9a8fd37b3fe1d4d32abef44506d2fd767754394c682deb81818e2066f6b799991bd33f5d2a2788b924cde1c3135f2ea576e5278fdfc4645ecbf547141487b963d0c87b9b4794c7af626bd3c33ec9b0808be65fc3def87157cf4a9fba3298274b25b9f311f83e64869e64c93928b06357526e2a8e8996837de1b8b91dd66af32e6c203b91c1a66642a980c09e5c45559239b3574a626d712429ac1ec70c58e2b8e796b48d905d23ae0b749a860f4fa0c84296e8968f720a3bfc1699f3b1546ade654ceeffa868723eb3e5368cfecf1a3dffd74dcd676b67cde699fa2de472271c0b13c504fdf6ee3cbb98092b75ce9a1254066b4902a6ea42ff53001856b6864b3993aba9f206ed603cfa728278dfc8df7b85dd7d93734023ce92af8dca6e2723e0c5f70367a470c7d8cf607722d15c89d4b744a84cff8da589a00db81bdad8fc6db8c50cdd6b9671350b80ec777f85b64002c2700b33f522dedc3f247cc79f49aff19c80a33325477a024911c44a10f13653dafb2671275b423c26b77c419e19d40172f723716dacd562f78d69c1c3340dee9e1f93c292ab488002d1849597a16c1e5afbd1941dbafa9944d37e3e29fba23d644193a242fce63b305617892e67c5caabed9667fba5de59eace576bf42c94796ce8434eafd7505ac7a1739158e4b50bb40a11668e83d62cc80e6e1795fe586c60186ee9a0bd0d011e59d7bebd87612ddd626b95bd41f317a14f05f501c342a6956b5e62c1737e559bb8ae63da4a0664d9b6c1011c48450995b870d1ea885775013ee3d67a7d6e7e2ac747f98f4b58b1f82b92f290f628f92f50b1c2322137459f8041e217e773b5b91867b5dc2036237e0261d0172fd1d32146077a3e169dd93e04be8eb4b6d5aa794fc95de33cc475b10512af3a4c19340f3a16aaf7050efb8152cb87d039922c770c05133593fc7989e5a46b7205171c43319b35261387bbd239f442fbdcf59a43876ba5895fb5954f6c8ff838e151af7459068ad070d5e049257429d5ed6e8767b1294a8a505cd00b3e9eb991496810f913e6c92382a80c562667829aa82fe4e3d45750c07d851cfa00758287bc21a7871da98876f02e49c46cd475c1b9688d0b629360c3670021964dd3c0a17568a4d28a77c891ca214422311238def2d23f278a3a97fde59c2c7a0f35c203260567999095d21bd341b40b0ac27d45904939017617381d7bc4e2ef91973f5244d1e63821f8209557b613910185a203e5b28150eba42eae2edc84eca5a92f569d7636119c2125e7b7e4191dfe04a044c3ec26ec2b14ef9754cdc4085ebe520905351318fe7b9ac98596cef99529998e40e15630cff93a8ed615244c856d199a65ef4eac17d17c96bfa3809065ddb7537b1d8866f0aaa4a4b48248e77c96e1c6ab405604d182ec7e984eeaef9f013164d9d96af27db97e6a9fa1030827ba854d954174b86202814c72aaf96e8da2b87f6de751fdae96d7f04ccaca276ac4d01ba013534b62ce879d67e06d19e98c83a7f1d02056561bc0bd56d5e55e4397a0bca51f9a4d9591c08656520c44d8e8d67f102723c1714f43697d011f1676a08fcf48a7fa78177b190b50125a4e4df458a2c0aa6d9ed685d27a9bcc8fda621291fa58ef5839d1cd9ea6f593edc3c08c139cc50ba10d6995a0613069ec34a0f095967dbd0b779ded5700deaa5d545a40d6397cbafe3b70a457bb0fb904d15b6530b9602402ac384a37511caf4328fb1421d06010589e7575b4b96b255495a31518037cbf2cc27d9b91b9a3a003aba2f4672b58d7c75219f4c8707b01c8c093fa73368bf62c9c9db2df81f25b833d0c6aa652432f84fc14078be0f207fa55fe85eb99c11d5bbaf4297758c62d13efab849abd8a278b1464ad58e7ea37eb9ba8a32ddd0012c9343d1f4f5365632c0bc5c62248ec99f36ea4e6623e1b634c0cba5b708290b7be317af9c64387b6d57bfaec624927c5a35d0b784e800b71b898220e95de0b757cf816af279cabeffeb0ec9af194cc9816d27479cb7443121decf9928f49a23c9531934ba183a2f474e7072e4625dfa6ce818ed5fac2c5b189eeeb89931b1b62e31033a139bf71235a16570d79167be184fe5066e8563da19bf8d22a7abf56a631f4bf9b6d6cad7433529a5369dbff939b47e75d22f67767b86269f4fd7c507be0b5dda4ce5e174a0b6dfa2d88b427e226fc95c831a59716a8089a16051c4181dbaccd90ae3b9482986033b5d956b759744c55a8de2bdb1f1480869d4b460dd03c5ca7512be126d5278a9cea07f7b67b0536edab89eef4687b53b64b03b78a514265712632d4e904c1c9bf72daee79f2a55cd842ea031e41ee3030cb08125c7b11061b9315a660688ba224b5a687ae2bcbc303d76c8e72813e32589d4796b466d5ac7434f011c64f56f6d5d0019f70c60e1680d6a51e84c20aeb8786ed8eddca1ed5fca7d14ae5200fc7d3443c63b58901c9a6062bd57bf0fdbc38f8f7c1f5d42b56cbef0dddfa1b656c74f5b73fcaf7a39b8a500c9dd689a8e4533fe9e7890b0b39253e6e0190c4bc12b3303e7a374eb7616a256fce072c1b56c32ae6f8e82a8e6f36cd295e54ea4fa32ccbf6652caa104112825a1960e9184b854bb94605d41be1d7e75271dbeebab774fdb8a41dd52246516fd1a6f2ffa5bb85002093edd317a2f9cd3d7c4a77a577be6cad46e71f5d666cfd0724ece36ac04f9b1cabfbc5ada9864faba030223189c4db888239e79f75b3747b0fee5c0434554292b6aa776008e2533ac1f1ae8cf3f88ad62420b7d57a92d6730b85125c11524652a2572f077900472a3cd56a3df5c7f9d0155471272a5e4b37dcccadb831d6691247e932711878dda2c7c56ab1ea472a9dc45a0cb6afc0876350f017f86eff043f597c603946e73be3af824b70a0029955c98e578c9a0f100133c31aa3a79c464b49dd1a6eeb02a3e4d0f1513272544c3152da6d28eec61f2356fff0e311cd977b4d1b5e9edfec8feef78d944ba29eff27b8d9a11c034f0addc9d9845114bc726a191ffe8b0ffb1fbde8f0fe5d9fe91dc4487614cfad6b2b72d492e2803f9db378eed8b2bc2af71b389ba78543ae7618f1d3f560120342646b86bf44a2b81700119652764436d6ef65a1d515e6912e6d4a4921bfbe5db47c322f3a6cf2434f0c425085731d46a0c5bb6c1046dc1b942d24cca50c8bdfcbea5a387eb39a7ec0d00c2c90658742bd73e1a845484fdcf78cf0c073b50584ffd55c1548f3ad0a779ec1422b2fb92ae4c0a939a0570ede3f00a3a02f7a76ba2d8c5a78719d26f836f02823939d3d8941d05ae653d2e286ebd8ba00c2eee404f12e8950d1ef0d7b7b5c0e372705b3e4ddd3fd1d62656d680774d73634cefa293fe91dc57136889ed288d6a0b3e4da4131bd1c6e8e95970444eafc9157d75ff5356aedc5050c4520bac006ac730484067a9479d7ced285ad0b84289598f903dead51249984cfc0c8ea2f5f07b81151e9faa4d637657a0c27a5cfb42f6b84cc9596a89658918ad16ba14ef1282c3952a81ae1f87ca6dfe4b0afec43297fd2d97a43b7ea984f7b172ba6a0c9109252b6121f679a8a5ab04d5f5a595246142feb4ab73873dff4498c952f8a339b47d3bdf7d82aa74dc3d5f7a5854db2e1fa00aa4c0167cc2e4bfc68511491b2fadf26f3770147b92fd2af82fef207057ca4bab78bd479bd17841c04c8f00e10934334075ce293e64ecb83d9549609106833eda5747c3124ed256ac46c7c46de43a66e05d1651398a000f1e69b3838425508407ee95142e0df89323d335a9034c9bbc6b262a91a4bdf16478ea96cfc22e1099be35a159deb79d8a1f4433476c143f427c8f06e9c48a23dd0626fb801e838a8c414a0f4c86ebfcbc69ec8aa1fd8d42df684c7a554818746ff1aba897587674cfbe6cdd39dc68b6f270f727428db1bec3bfdd0957c53921d93298d349874be80a455f8768aee59df0d78646f6befb4bc5856b23a1cda48f5eaeaaaf269d3655af62162641a59d1bab62936a1d7ae486507474b01bcc3ec751807fc8e396e68075af6bf616b8037e36d2e53cf0e3395e23bfd74ffb611f26fd3f90c45e0de844848c8f7323eb93f42689e40e3575b4b97fd089a45256ac5443449036d1ff6fdce1d28235dbf8c0a4d37fa2d9b506be5f235d9c0b9bc2944a27bc9291c04a0f7b89fdbb391226b2dce23b30a057b2359e6cd80b12e12bb5ddf361a0bc81bbd0612ee50f8d98c51c9e8b67f44f89eb29c1d8315565e1136fd4562cad3b396b130ab8debca32831996939c1fd58a80220a6bd0f251525d65856df4d41b069cce6414f01aab21ba05d851ee6c03bc93a02cdfe29e409d4cc253c3eb351e24139b5b4988edfd5ac0656bc3c7569bf9f3920faead9e4c546c9700a19f66c922f5012e2b3e819b02fc5513678c43bead475a00babd6d1626fbf5dae820cc88ad214457c5cd86a4ad6396164bfc791896898c16680640a121d98c7d054a0e239ea649455c323919f21143b6c1ac855da5201ac624b184397b16df5eb9d026ec3490dd1090b9b1ae3a76c3bd50b744b9272c97e43bbffcbe47776136b19778591325d357379c420cf2530fd0c8a3928642a65f537418bfb60c722c62bbcf51a78d3ae3caec9c6c66994ee0c03f82962573e8606cf76de084d47e623fde12458cc1bd613b9", 0x1000}], 0x6, &(0x7f0000001780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r3, r0]}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r6]}}], 0x128, 0x884}}, {{&(0x7f00000018c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001940)="423fcf864c9ca50f379092b3a252e18458112f671018da0920fb44431656391466e526da323d6109f0ad70938c79eebf194b9b416daf8f4d53999aff42cba3d449fd3f7465f17ad63cc95582730cbbff04e4a8cc2ffb4010095e592049c29967769a8b66f02abcf9579465a11ca76bcd9fce3a171e5e4226dad22cc3c104a8d584047f21d6bacea2b4c98f7e9d0e00c6262ec742d9827db0a772e765e8ad4e49b5f6e4352a7edae1e6b01d4029202904bddb3b45cd", 0xb5}, {&(0x7f0000001a00)="39e69d634df07bc404b18d4a36f49786007a642542891b0fc6b4876dd86950160f099bde8edf1cc476481a9ee555bb8400ffdcc892", 0x35}], 0x2, &(0x7f0000001a80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r7, r0]}}], 0x20, 0x20000000}}, {{&(0x7f0000001ac0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000001b40)="548c25085efc6fb3d049387ae7981f980906c0e42cfda7a3899064524008627ce6b5ebd66486a93620a32f64d7f5032b4a0464c1d6796b2452d1db3d7ada010b9920b86ae3792bce0fbea9f00bce74ffd556f41dbb465d395b9c39c926409db3f61412876c967c962f5fd02b", 0x6c}, {&(0x7f0000001bc0)="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", 0x1000}], 0x2, &(0x7f0000002d40)=[@rights={{0x24, 0x1, 0x1, [r8, r9, r10, r11, r12]}}], 0x28, 0x880}}], 0x3, 0x4004)

[ 1656.435559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1656.490955] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
21:42:15 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0)

[ 1656.568519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:42:15 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x4040080)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:42:15 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x12}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:42:15 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x2, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x18}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x100}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x50}}, 0x8000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1f}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x40080)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, <r3=>r1}, './file1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x70, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7fff, 0x2c}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x114}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x23a}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = syz_open_dev$vcsn(&(0x7f0000000140), 0x800, 0x340000)
sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40880)

[ 1656.904535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1657.259136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1659.881830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1659.893986] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1659.896801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1659.903147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1659.905958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1661.979560] Bluetooth: hci3: command tx timeout
[ 1664.027616] Bluetooth: hci3: command tx timeout
[ 1666.075589] Bluetooth: hci3: command tx timeout
[ 1668.123648] Bluetooth: hci3: command tx timeout
[ 1687.191659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1687.192804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1687.270030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1687.271117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1687.683142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1687.696014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1687.701244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1688.040234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1688.058434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:43:00 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:43:00 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x2, 0x2, 0x2, 0x7f, 0x10, "4bee1617892691972b37cb73f3f6abfe9a7836"})
close_range(r0, 0xffffffffffffffff, 0x0)
write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e2f66696c65302020203a202727202b6d20205d202c2a255e272c2520252a0ada039ccc9682fe3d74980a93c2c928b8311d87c4ce4d894b6310850546b0c5e9a63b9bd74865a046a7402ec4656da6284a5f8844269c99e96acec6970ed9caa9d063dcaae18ad3e70add61e551ced383faf869cbf456d73ea75170d053b7625f3d4c3a77bb17729fda3ed4138b5137e7b95d57fe8835b5c9cf59bfb258d3baf951f8069a406644ed90f74d4d08e6305664ea6f6052d604"], 0xba)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:43:00 executing program 4:
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r0, 0x600, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c1}, 0x800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x80000000]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x2, 0x13b]}]}, 0x30}}, 0x44040)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r3, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x9, 0x1}, {0x5c, 0x1}, {0x0, 0x4}], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)={0x38, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{}]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x3a}, @val={0x8, 0x3, r5}, @void}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40800)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x4}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x8aba}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xfd5}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x7f}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0xff}]}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0xa0e60}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x80000001}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xffff6feb}]}]}, 0x104}}, 0x400c000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000000))

21:43:00 executing program 2:
r0 = fork()
ptrace(0x10, r0)
wait4(r0, 0x0, 0x80000000, &(0x7f0000000240))
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r1, 0x0, 0x0)
clone3(&(0x7f0000000300)={0x210100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x21}, &(0x7f00000000c0)=""/31, 0x1f, &(0x7f0000000100)=""/93, &(0x7f0000000180)=[r0], 0x1, {r1}}, 0x58)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:43:00 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r1, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4007, @fd_index=0x8, 0x4, 0x8, 0x1, 0x8, 0x1, {0x2}}, 0x9)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000440), 0x4840, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x13, r3, 0x0)
syz_io_uring_submit(r4, 0x0, 0x0, 0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4007, @fd_index=0x8, 0x4, 0x8, 0x1, 0x8, 0x1, {0x2}}, 0x9)
r5 = syz_io_uring_complete(r4)
r6 = pidfd_getfd(r5, r1, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x8)
ioctl$VT_SETMODE(r5, 0x5602, 0x0)

21:43:00 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0)

21:43:00 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:43:00 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x14}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:43:00 executing program 7:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, 0x0)

[ 1701.588169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1701.590977] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s
[ 1701.592014] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] 
[ 1701.592664] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present
[ 1701.593223] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00
[ 1701.593881] blk_print_req_error: 149 callbacks suppressed
[ 1701.593890] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 16 prio class 0
[ 1701.596684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.597632] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1701.598929] buffer_io_error: 174 callbacks suppressed
[ 1701.598943] Buffer I/O error on dev sr0, logical block 0, async page read
[ 1701.618870] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.619826] I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1701.621114] Buffer I/O error on dev sr0, logical block 1, async page read
[ 1701.627192] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1701.646417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.647736] I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1701.649183] Buffer I/O error on dev sr0, logical block 2, async page read
[ 1701.687988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.688571] I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1701.689218] Buffer I/O error on dev sr0, logical block 3, async page read
21:43:00 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

[ 1701.715629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.716115] I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1701.716858] Buffer I/O error on dev sr0, logical block 4, async page read
[ 1701.746538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.747031] I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1701.748219] Buffer I/O error on dev sr0, logical block 5, async page read
[ 1701.781331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.782144] I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1701.783075] Buffer I/O error on dev sr0, logical block 6, async page read
[ 1701.803893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1701.815425] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.816068] I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1701.817156] Buffer I/O error on dev sr0, logical block 7, async page read
[ 1701.818337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.819291] I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1701.820550] Buffer I/O error on dev sr0, logical block 0, async page read
21:43:00 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1701.837355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.838754] Buffer I/O error on dev sr0, logical block 1, async page read
21:43:00 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x404c534a, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000003c0)={0x220, @time={0x9, 0xd3}, 0x3f, {0x7f}})
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000300)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0xf, 0x67}}, @random="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"}, 0x90e)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 1701.859891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.878206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.881779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1701.887271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.893964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.901446] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.908320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.910426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1701.917715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.925697] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.928062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1701.932416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
21:43:01 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000000))

[ 1701.936215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.944685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.949798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.957063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.959080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1701.964357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.970693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.982696] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1701.983885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
21:43:01 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1701.998956] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.001702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.002451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.010184] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 1702.034782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
21:43:01 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x15}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 1702.053847] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.054608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.055410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.058019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1702.061630] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.062378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.073720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.093381] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.096747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.119451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1702.121073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.127964] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.149860] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.151533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.152796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
21:43:01 executing program 3:
syz_open_dev$tty20(0xc, 0x4, 0x0)
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x68e146a1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x2)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

[ 1702.176742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.176816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1702.197366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.223673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.245333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.252656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.261705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.268342] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.274060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
21:43:01 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:43:01 executing program 4:
semop(0xffffffffffffffff, &(0x7f0000000000)=[{0x4, 0x1, 0x800}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)

[ 1702.291988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.300049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.308879] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.317680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.322677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.332067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.340869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.347995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.350282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.356561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.362218] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.368921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.372321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.377232] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.379008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.393940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
21:43:01 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$KDSETLED(r0, 0x4b32, 0x10000)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r2, 0x0, 0x0)
r3 = dup(r1)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x89e1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000080)={{0x32, @local, 0x4e21, 0x4, 'wrr\x00', 0x0, 0x10001, 0x36}, {@multicast1, 0x4e23, 0x2, 0x4, 0x6, 0x40}}, 0x44)
ioctl$VT_SETMODE(r3, 0x5602, 0x0)

[ 1702.401341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1702.412708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.426427] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.446120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.451078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1702.459307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.471986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.482140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.484584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.500862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1702.526745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.534032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.540798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.543723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.552161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.562649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.569042] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.577438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.585896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.598719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.600695] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.605098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
[ 1702.625204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer
21:43:01 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 1702.703415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1702.716003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1703.021770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:43:13 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x68e146a1)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x10}, 0x844)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:43:13 executing program 6:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8901, &(0x7f0000000000))

21:43:13 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=ANY=[@ANYBLOB="18930000080211000001081272f6b4000802110000d2000008021100000182860195099a1513652d2bda75f0f1789086c721a60fe929086f59ed6e03feedd9df426e926a"], 0x1e)

21:43:13 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:43:13 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:43:13 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00')
fcntl$notify(r1, 0x402, 0x80000024)
fcntl$notify(r1, 0x402, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x19, 0x19, 0x33, &(0x7f0000000080)="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"})

21:43:13 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0x404c534a, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000003c0)={0x220, @time={0x9, 0xd3}, 0x3f, {0x7f}})
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000300)=@data_frame={@no_qos=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0xf, 0x67}}, @random="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"}, 0x90e)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:43:13 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x16}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 1714.958255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1714.973300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1714.994750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:43:14 executing program 6:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080), 0x6)
ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000240))
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 1715.032240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.050938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:43:14 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r1, 0x0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$TCXONC(r0, 0x540a, 0x3)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r2, 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x68e146a1)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r4, 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x3)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'})
r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r6, 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x68e146a1)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000000c0)=0x81)

[ 1715.197645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.227387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.246803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.304086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.336265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.353208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.372075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:43:14 executing program 3:
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x404102, 0x0)
r1 = openat$incfs(r0, &(0x7f0000000080)='.log\x00', 0x183200, 0x10)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r2, r3, 0x0, 0x68e146a1)
fcntl$setstatus(r2, 0x4, 0x44000)
syz_open_dev$mouse(&(0x7f00000000c0), 0x433, 0x100)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x7)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:43:14 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:43:14 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], 0x10)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000300)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xde7}, @from_mac=@device_b, @device_b, @device_b, {0xa, 0x7f}}, {0x6, 0x0, 0x0, 0x0, 0x3f}}, {@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_a, @initial, @from_mac=@broadcast, {0x2, 0x3}}, {0x4, 0x1, 0x0, 0x1, 0x13}}}, @random="64116838da22c656569a875cdc198f9ba28efb8a158ecb43cadb129cb794eac79e93bb7516817424a57c58b8e4dbfe019fa7290d3afbc74174df774868b8da196d7d5b9fba36182ffc1123ee222471d9933a32abb920eb4d968418dc194fef10ee01f28fb577cee7d73adbc50eda53209f9bf4b97933fb05ab703ca7c3b18373e988873581126919fa886d4d2e55e63f218d3d6ea137ef9b5cd54772c7d2dfe1b19cf270bba67d25a57b42d10719946bc4945040316e2fb0d7b9556ea6491afcedc6536977a6a3a6bbf188201803dc9e5a46df55c8d75313cc047ef1eb08a7f0d78546c568323d20b5d90037368fb5aaf2487632d81ec83955d5295a4670d038603f8c5bfc131338374f289190d67cc72137954312efea217d018cedf37f6222198646733910fc5e14e3f7f2a27619e3c0c7c817880be3179df9c302108e9778abeb5944918bec1ffcf3caafc68ee40212b2ae6156ad55756d0cec3b203c1562aefc6a81e03ba7ece2a01f2ef07e7d1bea63f1e40846fd95087e49c4ee1649addae901dea2f285eb743dda2d4ff26971d78ae6d2c47f7a8ed91a360613c03e6af4bc9c61ad5c2104fed841a93faf7b8588c941fa646db2bb8bd4909f9c6bfc819a131e2957a12fc2cd1270a24aa2784fcabb16f8d755fc72f00afd8db7736deb596429732c05eeb87e60f5ddffab89167081a635b858f9a333598dee9ed8c14e7170121a2377149de609ca7dc81281611e19124bbee95e88aa5d687060cb945d61176fcdd45283f7f44759e26a33f65f1f67e59b83b204fd14011bdf4c84eb2f20f46af0885a83a4cfd863015c95798ef3b89f2205ae095cd6af60b45ab1ca48137aea89831d03ab0ff569c854afd8b7f0aa87800fac7e72c8f53cd7c3da451caea6d908657c6ba31261362d9fed18e95403f63bda6933facaec8643e6290bd7ef322aa109ddaf769ffd09582b8599d2a42768558298aab88917b55af92fbf69867a59f77232548af566999f7aef8c9c1d8fcd975d52a7da3209ba3353cd1562d752f0980a406ef6fa5e572be39eb28e7897d2cbab1ca14a8ec5d3bcafde8c3ab362f161db357d9e1e762a9507324485e2c1b144895328ec563c7871c7e30e6e2871828af162901a79337d80733c69eea3406d37a4276550fc733845eb1124cde5652d4dcdc0d3b9d61539526f012ede779626430e5094d979f933aa722dcedace80139c3618e641acff41f18ad679eb7fa9befc786e3e81ad9ce25c48b7d1f23e371ec0900c0b9255bfe7df4ddcbd06e476be61144893089dd56346bc3665c3d5ad4887c6c78830ed949c4cd1ca2c1e899e94804e5e521c838b38299540e748cf0fa8489029848d59a845a5d9764aa9cd785e623d70c85d083e2a87b5c39c66851e6e6f89e33d1c170d360a26bc3eececbe25b51784cf481130656aec2108a74b15f87f28cc21a023d06f136b2b631404f45d56ce8ef00872af16c60104b4df9801eb08e6b816f5ffc6dec2133f32d92a3f6a5adfedd4812577c135f3e127c252cdb39a3d93dfe3b1f15037f07528944e8b9be6a6c66406126403d82a304f9f4e8ab14aba23ed7ae24477fbbcf38fecf3e1cbd28695a1919e1470a1bc1e33da03ee76924efc6533c9067f4d903f16f15a24d2a173940a2094719f3464380cddfb4f6746bb97ed63e100d6c0db36c5587b74d04d36d0245fdf4e49f6fe9c123f987427189d520a6211ec548dd96df8d8f2568fb7f50e9c4c82958009801e92f84f"}, 0x515)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000100)=@ctrl_frame=@cf_end={{}, {0x7f}, @broadcast, @from_mac=@device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000180)=@ctrl_frame=@bar={{}, {0x7}, @broadcast, @device_a, @compressed={{0x1, 0x0, 0x1, 0x0, 0xd}, {0x1, 0x2}}}, 0x14)

21:43:14 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x17}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 1715.573073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.585053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.620093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.638696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.658233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.679383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.703997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1715.825687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1716.015365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1716.032448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1716.053877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1716.079024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1716.096903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1716.129879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1716.154809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1718.774316] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1718.778373] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1718.783998] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1718.791286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1718.798947] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1720.859651] Bluetooth: hci6: command tx timeout
[ 1722.907585] Bluetooth: hci6: command tx timeout
[ 1724.955577] Bluetooth: hci6: command tx timeout
[ 1727.003597] Bluetooth: hci6: command tx timeout
[ 1746.357344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1746.358547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1746.401190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1746.402356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1746.851373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1746.876091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1746.888027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:43:59 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:43:59 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:43:59 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x80)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:43:59 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:43:59 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x18}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:43:59 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:44:00 executing program 6:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000300)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @random="6fadc7f2b16a", @broadcast, {0xc, 0x8a7}}, {0x7, 0x1, 0x2, 0x0, 0x80}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @broadcast, @device_a, @initial, {0x2, 0x6}}, {0x2, 0x0, 0x0, 0x1, 0xf7}}}, @a_msdu=[{@broadcast, @broadcast, 0xb8, "d0400a82689f92ea30fd6fe8b2e6ff78153791b2a5635298e9df597b909f26a324471bec3fd05f4ada2d89d79ed6a81827350536f3264200ac473f458788a495477b55e145670e10a6b4ed875502d05b649fa4e4bd996ace8252ad241e6196e6faaaf6087ce36729de2c21c4440af99897e751072c589961ac978b8ced79979099e6284aeaff99428072cdc9e1156930789c7129ce0bdc6e2659cddedb582e1639b5ed7e0fa648db7daf68a9f202732ef744fe32a9b39070"}, {@device_a, @device_b, 0xeb, "19f7edfcec32cb564b3f1a7ac4192ec0d9e613a885a0b8222a8682da688faac543b6d874df5dc9a285ee4b644501ca0b6757897e61d94b3a10491f36b88253d1e816a9c12f4b496a998a63710ca5fb409aeb3c04c3563cee2e39bcfa30634093a222952b9cc05120ebef2a422379cb28add168c11f3a99b70ed77dbd13720eb6316ef698ce521753f18873bc3f5e1b5212e67d4f23a8a1bd32de1db1ce1e317b0c5bc73c8af1df7605eed37f2762988003f4ca61d173e42c631b576a3bf82a497bef5397430becae805c7c77c88614316a7a9f23b128c8cd62876662ee81159cd56dbbe777358cc0bdb150"}]}, 0x1f8)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 1760.997546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.008720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.011350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.018438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.025970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.029890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.036131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.039014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.050172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.053152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.074849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.080769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.111960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.320209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.440851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1761.531334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1764.272156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1764.280014] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1764.283403] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1764.290932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1764.295785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1766.364585] Bluetooth: hci3: command tx timeout
[ 1768.411618] Bluetooth: hci3: command tx timeout
[ 1770.459616] Bluetooth: hci3: command tx timeout
[ 1772.507717] Bluetooth: hci3: command tx timeout
[ 1792.210248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1792.211315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1792.317873] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1792.319538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1792.723936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1792.730261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1792.736405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1793.045104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1793.050404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:44:43 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x40, 0x0, 0x101, 0x2, 0x13, "39d508bc1e72d45a"})
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)

21:44:43 executing program 6:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000300)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @random="6fadc7f2b16a", @broadcast, {0xc, 0x8a7}}, {0x7, 0x1, 0x2, 0x0, 0x80}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @broadcast, @device_a, @initial, {0x2, 0x6}}, {0x2, 0x0, 0x0, 0x1, 0xf7}}}, @a_msdu=[{@broadcast, @broadcast, 0xb8, "d0400a82689f92ea30fd6fe8b2e6ff78153791b2a5635298e9df597b909f26a324471bec3fd05f4ada2d89d79ed6a81827350536f3264200ac473f458788a495477b55e145670e10a6b4ed875502d05b649fa4e4bd996ace8252ad241e6196e6faaaf6087ce36729de2c21c4440af99897e751072c589961ac978b8ced79979099e6284aeaff99428072cdc9e1156930789c7129ce0bdc6e2659cddedb582e1639b5ed7e0fa648db7daf68a9f202732ef744fe32a9b39070"}, {@device_a, @device_b, 0xeb, "19f7edfcec32cb564b3f1a7ac4192ec0d9e613a885a0b8222a8682da688faac543b6d874df5dc9a285ee4b644501ca0b6757897e61d94b3a10491f36b88253d1e816a9c12f4b496a998a63710ca5fb409aeb3c04c3563cee2e39bcfa30634093a222952b9cc05120ebef2a422379cb28add168c11f3a99b70ed77dbd13720eb6316ef698ce521753f18873bc3f5e1b5212e67d4f23a8a1bd32de1db1ce1e317b0c5bc73c8af1df7605eed37f2762988003f4ca61d173e42c631b576a3bf82a497bef5397430becae805c7c77c88614316a7a9f23b128c8cd62876662ee81159cd56dbbe777358cc0bdb150"}]}, 0x1f8)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:44:43 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x19}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:44:43 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=ANY=[@ANYBLOB="90000000ffffffffffff080211000001"], 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000c80)=ANY=[@ANYBLOB="f8927f00080211000001ffffffffffff080211000000f9014302c8a10900505050505050ffffffff5d2d051574c5d2a20408cc0630070c01080211000001ffffffffffff3400e76318b9d78e3c61a16f1aa4f9ab8596eeb013934d5d91797e67a35076ab4120cfb464ce36198dd91015adcd1eaf055ae629259600000802110000000802110000006600e6ba5bbf30c654e8aa071873ea421a1db81632154e8a85210a81ca77385f71f28a46df627acfbe83cc344f0887a7f2d379920ab93e1c701e76c4fcb54dd0e23923ee4b2893d9bae3703e248086351400000065fb61bbfa38eb1f38f44a9fa1deffa9c596e01b0802110000010802110000019400deab1e0c9b7f69f00338bec127d32dc796d040879bf32dbf1d3b5d7c05f87aff86aa3bcdc80c11eb0f0093fa295ffcc747b92f8bf6244c7aaab21546b29ba7e20fb8c6660f438ba985c2c5f5469ebfb00f85c0ce875c9d43a06e25cc1a35fd1654f56d78e04611786e9caa89d0d5b35339dc2032937e47739c6b1bf6820abc5dd8be8f0c420000080211000000080211000001ea005a77f6f7f2e541950f106fa58364f490ce5619d049d99f59adfde6c93428256edb3e64effe54d20721dce53e125ee33a9a8bcc2da1cb6cf7f67f47ab18ff97a522d167a4c1ccc1f97d1b765eb276db0fb2f306eb4268b0f714c93a704877d841c57f26762b738cfc0195601c3b8f04f8c44ec8daa70901de09b24fab9b789fd16534a71e67bd64ef000000000000000716ae0c4bbb32a33c9e86da5a0a694acc80dc6dbe1c534fbdc17b096c6d840d489778cb7568b506671f2c583803bdaa0cba8fc0d34cf9d28408aa3b847a25a725b2f5ad6b5f954d5689e59bc2fd3228ce8030b68f25cf080211000000080211000000c800eb56eabb5bbd78a7ae4eeea1bea951ef3497dfa0c842d0f075c9a40c4551906ad52a1457d18211d03a91ce30c8918c8298c6ec3e462a04313cb712858b222ad6974012d5eaea85ed05e69b6f3977b890c5878b11360d4d717fd1c62c99d4842814457240806cfea8f6e790063de6c5983137cee3b95bd4ed70c96bff0b558e018d0a561309ab9836f556733af5d20fc5d6e45a3f1d865e743e51e69159427f140ba98ba351183cde8261a4708b62be828ee991aa88c62f2b70c8bd25bb99d007ebafc7e29867f70800000802110000010802110000000c001bab4b6d2ed3de7794a3ba90000000000400b81337d36d78356a58c0d7a2ad1d2c217f8c1e0219f6bfe61fb96774025180b761caf2985646abd8eceae5e4bab940ee687e7997e3f6cb9ae7ac265264e9b2ff2e8f0a1b89dd3af098ef0a9e7041c1dfc0519cb8242fcf2307ebb9587c271b8634248b65d234a34533eab6a6c09dd926e107ce02b7bf2b2c31a3829341c9ab4a3e60d26f99040b3a5065f321a7523bad126fbc683873523f3e05f7ffacc04bba29ff8de8b3033573461ec651c8407db46f6949bb0307006a3e173259780730f300716f266cbf52cb6b34d12e3c714116b92d7bf24713e4fdd8007d1bcf3dd9999141dc9896cb2fdf238591f794bc320ee1598007cc225ddfc169bf0666790d83418b66fb26269055a13e78ddd35f05da53f46f64b55b4c70bfa70d940000000000000000000000000000006abe972f5065ee2d3e559ff341"], 0x380)

21:44:43 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:44:43 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "8bce0407026424dad5314bb5dfd6a93f2946ba34dedd3ddd527eb47e06fa2fd1dbba36e337adafbd05d0a9dfa8569ab4036cdd41b1eac33a0c10e50b8c968ae1b305613742a212f50c5ad1fee9136987af089bf989f53996a3b56a1b7217c82fa4e8d94f20aa56219ae32b02c471116ad513de35eae336ac5183"}, 0x7e)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r4=>0x0})
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @can={0x1d, <r5=>0x0}, @llc={0x1a, 0x201, 0x0, 0x4, 0x9, 0x1f, @remote}, @qipcrtr={0x2a, 0x4, 0x1}, 0x3f, 0x0, 0x0, 0x0, 0x7ff, &(0x7f0000000280)='veth0_macvtap\x00', 0x9, 0x9, 0x5189})
sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44000012}, 0xc001)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000800)={0x8b0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0x2ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffff801}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x85, 0x2, 0x8}, {0x200, 0x2, 0x1, 0x94}, {0x0, 0xff, 0x3f, 0x1000}, {0x3, 0x20, 0x6, 0x1}, {0x1, 0x1f, 0x8, 0x1}, {0x5, 0x1, 0x1f, 0x7f}, {0x400, 0x7, 0x80, 0x7ff}, {0x1, 0x6e, 0x7f, 0x4}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x154, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x4800, 0x0, 0x7, 0x4}, {0x6, 0x0, 0x8, 0xfee}, {0x2, 0x2, 0x3f, 0x4}, {0x800, 0x20, 0x9, 0xaf}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5c77}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc0a1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}]}}, {{0x8}, {0x280, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xab}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x213, 0x5, 0x2, 0x7c3}, {0x15cd, 0x9, 0x5}, {0x800, 0x57, 0x1, 0x8}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0xc0}, 0x8)
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10080, 0x0)
write$binfmt_script(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='#) ./file0\nH', @ANYBLOB="27e054eba107d2a38467f96399f09fad15bfe5be243392852b83a5c18302aa480b29f63fdeb72bea2ae8f5b6c125db34a7984a964071058714c902797d6ed61b7a77eb"], 0xfe40)
sendfile(r7, r8, 0x0, 0x68e146a1)
fcntl$setstatus(r7, 0x4, 0x44000)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xa8, 0x0, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8001}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x0, 0x1]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x91)
r9 = syz_open_dev$rtc(&(0x7f0000000180), 0x1ff, 0x101100)
fcntl$setstatus(r9, 0x4, 0x40000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:44:43 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:44:43 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1804.668853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.677847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.679504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.688112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.691987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.694701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.699025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.700414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.704598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.705820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:44:43 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = dup3(r0, r0, 0xaca2bbf77920f516)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:44:43 executing program 3:
syz_open_dev$tty20(0xc, 0x4, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x14)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

[ 1804.815065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.858536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.920199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:44:44 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x68e146a1)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

[ 1804.977210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1804.993493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:44:44 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x1a}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:44:44 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TCFLSH(r1, 0x540b, 0x2)

21:44:44 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:44:44 executing program 6:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000300)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x5}, @device_a, @random="6fadc7f2b16a", @broadcast, {0xc, 0x8a7}}, {0x7, 0x1, 0x2, 0x0, 0x80}}, {@type00={{0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {}, @broadcast, @device_a, @initial, {0x2, 0x6}}, {0x2, 0x0, 0x0, 0x1, 0xf7}}}, @a_msdu=[{@broadcast, @broadcast, 0xb8, "d0400a82689f92ea30fd6fe8b2e6ff78153791b2a5635298e9df597b909f26a324471bec3fd05f4ada2d89d79ed6a81827350536f3264200ac473f458788a495477b55e145670e10a6b4ed875502d05b649fa4e4bd996ace8252ad241e6196e6faaaf6087ce36729de2c21c4440af99897e751072c589961ac978b8ced79979099e6284aeaff99428072cdc9e1156930789c7129ce0bdc6e2659cddedb582e1639b5ed7e0fa648db7daf68a9f202732ef744fe32a9b39070"}, {@device_a, @device_b, 0xeb, "19f7edfcec32cb564b3f1a7ac4192ec0d9e613a885a0b8222a8682da688faac543b6d874df5dc9a285ee4b644501ca0b6757897e61d94b3a10491f36b88253d1e816a9c12f4b496a998a63710ca5fb409aeb3c04c3563cee2e39bcfa30634093a222952b9cc05120ebef2a422379cb28add168c11f3a99b70ed77dbd13720eb6316ef698ce521753f18873bc3f5e1b5212e67d4f23a8a1bd32de1db1ce1e317b0c5bc73c8af1df7605eed37f2762988003f4ca61d173e42c631b576a3bf82a497bef5397430becae805c7c77c88614316a7a9f23b128c8cd62876662ee81159cd56dbbe777358cc0bdb150"}]}, 0x1f8)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 1805.160116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1805.165535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1805.169311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1805.173558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1805.175155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1805.187527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1805.189182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1805.197781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1805.203315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1805.209218] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:44:44 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:44:44 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:44:44 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f0000000000))
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000100))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x3f)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r2, 0x0, 0x0)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r4, 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x68e146a1)
ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000140)=0x6)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x1)

[ 1805.334895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1805.377710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1805.526257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1808.240021] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1808.246319] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1808.249241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1808.258605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1808.263249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1810.331654] Bluetooth: hci3: command tx timeout
[ 1812.379642] Bluetooth: hci3: command tx timeout
[ 1814.427545] Bluetooth: hci3: command tx timeout
[ 1816.477320] Bluetooth: hci3: command tx timeout
[ 1836.397279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1836.398641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1836.476121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1836.477311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1836.929695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1836.957736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1839.413233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1839.419362] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1839.423805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1839.429158] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1839.434414] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1841.501648] Bluetooth: hci3: command tx timeout
[ 1842.523553] Bluetooth: hci6: command 0x0406 tx timeout
[ 1843.549363] Bluetooth: hci3: command tx timeout
[ 1845.595606] Bluetooth: hci3: command tx timeout
[ 1847.643664] Bluetooth: hci3: command tx timeout
[ 1867.297108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1867.298241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1867.383024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1867.384562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1867.879071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1867.885889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1867.893498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1867.900786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1868.207065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1868.213969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:00 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:46:00 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x1b}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:46:00 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))

21:46:00 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)

21:46:00 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@ba={{}, {0x2}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x8}, [{0x0, 0x2, {0xb, 0x4}, "d10c35c0913843e3"}, {0x0, 0x7, {}, "823e33a688f40550"}, {0x0, 0x5, {0x0, 0x8}, "616a03c09a565c2c"}, {0x0, 0x3, {0x5, 0x2}, "602496f36ab8a0a8"}, {0x0, 0x7, {0x5, 0x8b1}, "1c1134bf323f2eb1"}, {0x0, 0x7, {0x8, 0x7a}, "fef77ab49dff302b"}, {0x0, 0x8, {0xa, 0x7}, "8e1d99c829f084f8"}, {0x0, 0x0, {0x8}, "6b084f4e1bcdc754"}], {0x0, 0x2, {0x6, 0xffb}, "4d7c866eb95d58b8"}}}, 0x7e)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000300)=@data_frame={@no_qos=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x81}, @random="23a9ede5c008", @device_a, @broadcast, {0x6, 0xffe}}, @random="39e4f343611be757a78924915dc5271d0e17e8fd667b0ffd03d00407cbacc51894a66eb285fae0db67b37b4c4fff095e48d89929defebe6fe04dddcad87408fc5ac73f995b37e80dd2271b142b1c82a4e59ffe807c1b20de841f61e67fa2a47dbdfd47e8cf6e27ea2a243bd01446dedcc9c15bc331acd51a1e7bc510f35e1f2040a15869a19e3c4703ad4fbafbd8fd487a3a3506d14c0c3a1d35a137c3466230076380f9ac8304389ee980dd1df81f784b63be240ee646741fd6653b2b8c57e572af3f6c7a97dd1d49fea29f5ac5e27099702171ec0663497c42b64a0ef69651dc2cc42ebb0c27e8668889641af95e31bd62b4641a3861a3c29c2fef8a9b882581566ffc197d65aabea42ebfc8908c3925ac035a9088306a1d1fddcc8520d1f988d37a1a3ddb6a5aa328d008e201d48ca77ff0b23f5607169cf8ebbe30d01547325b90cd9b095862c25441f5dfccf7472f0050349eac116f7aa458b30aa6a8054a185a2f51194c814887e0fb3ddbce12791d4303c3b3d62ea52bb911dbe5a60372bd2c1364d93b5ab76ba0caafa6fde358d992523b7c17ea5ae7e66ccb2f972f87a8ebe5f1dfa2ef2bc39e8aaec51118640b351621199259369564347a1c284a09dfb54773980d2c361f217aaa1cdf9f7901cdd835a4886116c8a915a98198c96af286ff2a90c1af1647adbe995c12631931cddd4d801655363690e2028b78a09201af31eb88f2befc7b8630e073e710d39930c96159f2034782abff32d474a10d26d962b0452dbf85c68dfd0e6190041e5982914babe063c0d32a0afd552606f0a6aafcd58d7ab00381b8f4251b3de4dd8296638841593c6be7fcd85129ab302c2244b14f8504b8f99e36b57832c3b71c3215c0ab611750524c8faca803f463b9e8cfc9fea48f3ee120780810e543efdb0ce60b1223491ba89535783eb7a358ab9772ee8a2489ea1176fc12894dd37ccf8629680011bd260f8ca91d2d5342ce15abf304854904bd7e7166787b59f8f20b64a3e6f449b32ba8fb2f14d8c93d2041d26a6f7772ec8b0f6582a5eda6ca13039ff8574b36cbdfe4b87e7105fb8d1ac69a2b796151b8b53eb613adda2104c4045025be1732fd119561b6b1bc37595ac01205aa613e763b01e92206c514450e122f98c569148eaa023b109bf3a5b26d30e2873e9e739346ec493744045c87e368a40ac53536313c4d33704390ad40bf3b4c7fafe1eeec18e09aa7c568de62d1dc2f7dd53a80f022d7d66bbbd64a2c4c8b974c529b15bbbb79225571ad7c8f9ce2aa9a0e1f05ba2b37cddfa8d8252c764a6bda81146b850b6fea8a154536fed259fccc119a9b93048f6a2907b832531e9529b57a824d9306adef88e7f9fb66bceb59afb7b75c77a9e83782425e215c6baf387807c02fa46a9648c6dfbbd6ad95f9d324a6eb8e5c4773f6d24dd484d552bcee85ea36ed26f6a283432d371613f125fbb14c93f4abee4ba2eb8eca036b0da3b9989957245e3330b7dc61ce9bd7d35b8deb3b4fe9a08c03abffcb885edeb000982ec3562bc3a5f1affaa9f80608cc9efec0d5beb5c8c97c7c2b3acf7cfc19e517d6f64e27f42db7d36350b778be13586b16e009d3f1349b8c9ada9add7f70f8b6912d1a684075e865d37a1d674e4aa50d2998fd7b797b8ea32d53c7d3837f428da66f9c99b6beacf0c205c3160909f8e1cf62c36ea7f1f36cc2dc3ef1672af59eae1c979f548ca2c520a2397ce97050abe960dc999ee5533c9b31eaed5f20a4ba22ad5b479b58ca603f9327a210387795438b2a0a4a4d00ccc105965e2e592d6cc1aeca75796ebd6f085b9ba801a5d8e55786fbf41335834ca170817ae4299d1900369597b12960b11b66e8c3f5777247a08ce30a50072f60ccb52a0cbc18a5c6fc62ad3c75b0f2"}, 0x561)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:46:00 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 1)

21:46:00 executing program 3:
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x400, 0x2)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r1, 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3)

21:46:00 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1881.495947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1881.500191] FAULT_INJECTION: forcing a failure.
[ 1881.500191] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1881.501977] CPU: 1 UID: 0 PID: 37975 Comm: syz-executor.6 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1881.502007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1881.502020] Call Trace:
[ 1881.502027]  <TASK>
[ 1881.502036]  dump_stack_lvl+0xfa/0x120
[ 1881.502076]  should_fail_ex+0x4d7/0x5e0
[ 1881.502117]  _copy_to_user+0x32/0xd0
[ 1881.502156]  con_get_trans_old+0x1df/0x290
[ 1881.502191]  ? __pfx_con_get_trans_old+0x10/0x10
[ 1881.502214]  ? avc_has_perm_noaudit+0x150/0x3d0
[ 1881.502274]  ? cap_capable+0xdb/0x3b0
[ 1881.502306]  ? security_capable+0x2f/0x90
[ 1881.502336]  vt_ioctl+0xcaa/0x2db0
[ 1881.502368]  ? __pfx_vt_ioctl+0x10/0x10
[ 1881.502393]  ? lock_acquire+0x15e/0x2f0
[ 1881.502419]  ? get_pid_task+0x29/0x250
[ 1881.502461]  ? find_held_lock+0x2b/0x80
[ 1881.502493]  ? get_pid_task+0xfd/0x250
[ 1881.502529]  ? lock_release+0xc8/0x290
[ 1881.502559]  ? get_pid_task+0x107/0x250
[ 1881.502592]  ? proc_fail_nth_write+0x97/0x220
[ 1881.502616]  ? find_held_lock+0x2b/0x80
[ 1881.502647]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1881.502679]  ? __pfx_vt_ioctl+0x10/0x10
[ 1881.502708]  tty_ioctl+0x78b/0x1810
[ 1881.502739]  ? __pfx_tty_ioctl+0x10/0x10
[ 1881.502764]  ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0
[ 1881.502792]  ? __mutex_unlock_slowpath+0x111/0x7b0
[ 1881.502824]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1881.502854]  ? debug_mutex_add_waiter+0xb0/0x1d0
[ 1881.502885]  ? __fget_files+0x34/0x3b0
[ 1881.502920]  ? find_held_lock+0x2b/0x80
[ 1881.502951]  ? __fget_files+0x203/0x3b0
[ 1881.502984]  ? lock_release+0xc8/0x290
[ 1881.503017]  ? selinux_file_ioctl+0xb9/0x280
[ 1881.503045]  ? __pfx_tty_ioctl+0x10/0x10
[ 1881.503074]  __x64_sys_ioctl+0x18f/0x210
[ 1881.503108]  do_syscall_64+0xbf/0x360
[ 1881.503142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1881.503165] RIP: 0033:0x7f5b158fcb19
[ 1881.503182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1881.503203] RSP: 002b:00007f5b12e72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1881.503225] RAX: ffffffffffffffda RBX: 00007f5b15a0ff60 RCX: 00007f5b158fcb19
[ 1881.503240] RDX: 0000000020000000 RSI: 0000000000004b40 RDI: 0000000000000003
[ 1881.503253] RBP: 00007f5b12e721d0 R08: 0000000000000000 R09: 0000000000000000
[ 1881.503266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1881.503280] R13: 00007ffcb67f2f1f R14: 00007f5b12e72300 R15: 0000000000022000
[ 1881.503311]  </TASK>
[ 1881.514868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1881.528184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1881.563181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1881.573082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1881.598664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1881.603945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:00 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x82883, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080))
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000000c0)="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")
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x1ff)
ioctl$KDSETLED(r1, 0x4b32, 0x1)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '/dev/null\x00'}], 0xa, "a1277698e119e20ed548d8893d45672cc4ecaa67f34c13be6206505ee1834ccaa006e8da92382c144701cc6de7b1"}, 0x44)

[ 1881.618787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:00 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 2)

[ 1881.645002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1881.650705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:00 executing program 4:
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x891d, &(0x7f0000000080)={'ipvlan0\x00', @ifru_data=&(0x7f0000000040)="9b6d3ba3e379f6bab4b2cf155ba40de31f6c628bec1d060cf77d85cda33c38b2"})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x68, 0x2, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x30}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004800}, 0x8010)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x1, 0x2}, 0x6)

[ 1881.737052] FAULT_INJECTION: forcing a failure.
[ 1881.737052] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1881.739310] CPU: 1 UID: 0 PID: 38050 Comm: syz-executor.6 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1881.739341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1881.739355] Call Trace:
[ 1881.739362]  <TASK>
[ 1881.739371]  dump_stack_lvl+0xfa/0x120
[ 1881.739413]  should_fail_ex+0x4d7/0x5e0
[ 1881.739461]  should_fail_alloc_page+0xe0/0x110
[ 1881.739490]  prepare_alloc_pages+0x1af/0x500
[ 1881.739524]  __alloc_frozen_pages_noprof+0x17f/0x1f10
[ 1881.739566]  ? desc_read_finalized_seq+0x129/0x1c0
[ 1881.739595]  ? __asan_memcpy+0x3d/0x60
[ 1881.739618]  ? desc_read+0x285/0x350
[ 1881.739642]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1881.739681]  ? _prb_read_valid+0x6e9/0x830
[ 1881.739718]  ? __pfx__prb_read_valid+0x10/0x10
[ 1881.739744]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1881.739773]  ? policy_nodemask+0xeb/0x4e0
[ 1881.739809]  alloc_pages_mpol+0xed/0x340
[ 1881.739840]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1881.739869]  ? lock_is_held_type+0x9e/0x120
[ 1881.739909]  alloc_pages_noprof+0xa1/0x380
[ 1881.739942]  __pmd_alloc+0x3b/0x980
[ 1881.739973]  ? lock_release+0xc8/0x290
[ 1881.740001]  __handle_mm_fault+0xcae/0x30f0
[ 1881.740033]  ? mt_find+0x64c/0x870
[ 1881.740066]  ? __pfx_mt_find+0x10/0x10
[ 1881.740098]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1881.740149]  ? find_vma+0xbf/0x140
[ 1881.740175]  ? __pfx_find_vma+0x10/0x10
[ 1881.740207]  handle_mm_fault+0x2c3/0x900
[ 1881.740240]  ? access_error+0x17d/0x380
[ 1881.740264]  ? lock_mm_and_find_vma+0xaa/0x6f0
[ 1881.740293]  do_user_addr_fault+0x395/0xeb0
[ 1881.740326]  exc_page_fault+0xb0/0x180
[ 1881.740356]  asm_exc_page_fault+0x26/0x30
[ 1881.740378] RIP: 0010:rep_movs_alternative+0x54/0x90
[ 1881.740405] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 cf 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29
[ 1881.740426] RSP: 0018:ffff88804031f980 EFLAGS: 00050206
[ 1881.740444] RAX: 0000000000000000 RBX: 0000000000000100 RCX: 0000000000000100
[ 1881.740459] RDX: ffffed1008063f62 RSI: ffff88804031fa10 RDI: 0000000020000000
[ 1881.740473] RBP: 0000000020000000 R08: 0000000000000000 R09: ffffed1008063f61
[ 1881.740487] R10: ffff88804031fb0f R11: 0000000000000000 R12: ffff88804031fa10
[ 1881.740501] R13: 0000000020000100 R14: 00007ffffffff000 R15: 0000000000000000
[ 1881.740534]  _copy_to_user+0xbe/0xd0
[ 1881.740561]  con_get_trans_old+0x1df/0x290
[ 1881.740594]  ? __pfx_con_get_trans_old+0x10/0x10
[ 1881.740618]  ? avc_has_perm_noaudit+0x150/0x3d0
[ 1881.740679]  ? cap_capable+0xdb/0x3b0
[ 1881.740710]  ? security_capable+0x2f/0x90
[ 1881.740740]  vt_ioctl+0xcaa/0x2db0
[ 1881.740773]  ? __pfx_vt_ioctl+0x10/0x10
[ 1881.740798]  ? lock_acquire+0x15e/0x2f0
[ 1881.740822]  ? get_pid_task+0x29/0x250
[ 1881.740856]  ? find_held_lock+0x2b/0x80
[ 1881.740888]  ? get_pid_task+0xfd/0x250
[ 1881.740921]  ? lock_release+0xc8/0x290
[ 1881.740950]  ? get_pid_task+0x107/0x250
[ 1881.740984]  ? proc_fail_nth_write+0x97/0x220
[ 1881.741008]  ? find_held_lock+0x2b/0x80
[ 1881.741039]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1881.741069]  ? __pfx_vt_ioctl+0x10/0x10
[ 1881.741098]  tty_ioctl+0x78b/0x1810
[ 1881.741129]  ? __pfx_tty_ioctl+0x10/0x10
[ 1881.741154]  ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0
[ 1881.741182]  ? __mutex_unlock_slowpath+0x111/0x7b0
[ 1881.741214]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1881.741243]  ? debug_mutex_add_waiter+0xb0/0x1d0
[ 1881.741274]  ? __fget_files+0x34/0x3b0
[ 1881.741310]  ? find_held_lock+0x2b/0x80
[ 1881.741341]  ? __fget_files+0x203/0x3b0
[ 1881.741374]  ? lock_release+0xc8/0x290
[ 1881.741408]  ? selinux_file_ioctl+0xb9/0x280
[ 1881.741436]  ? __pfx_tty_ioctl+0x10/0x10
[ 1881.741465]  __x64_sys_ioctl+0x18f/0x210
[ 1881.741500]  do_syscall_64+0xbf/0x360
[ 1881.741534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1881.741555] RIP: 0033:0x7f5b158fcb19
[ 1881.741572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1881.741592] RSP: 002b:00007f5b12e72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1881.741613] RAX: ffffffffffffffda RBX: 00007f5b15a0ff60 RCX: 00007f5b158fcb19
[ 1881.741627] RDX: 0000000020000000 RSI: 0000000000004b40 RDI: 0000000000000003
[ 1881.741640] RBP: 00007f5b12e721d0 R08: 0000000000000000 R09: 0000000000000000
[ 1881.741653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1881.741667] R13: 00007ffcb67f2f1f R14: 00007f5b12e72300 R15: 0000000000022000
[ 1881.741699]  </TASK>
[ 1881.826713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:00 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x5, 0x400, 0x6})

21:46:01 executing program 4:
r0 = syz_open_pts(0xffffffffffffffff, 0x40)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x0, "dec07e", 0x7f, 0x2})
close_range(r1, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, &(0x7f0000000040)=0x5, 0x6)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000000))

21:46:01 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x1c}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:46:01 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1882.017195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1882.021789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1882.036309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1882.050626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1882.081378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1882.334444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:12 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 3)

21:46:12 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:46:12 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:46:12 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000200)=@ctrl_frame=@ack={{}, {0x4}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@ctrl_frame=@ack={{}, {0x20}, @broadcast}, 0xa)

21:46:12 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)

21:46:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x10000}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xec, 0x2, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_STATUS={0x8}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x6}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x9}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x4, 0xaa}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x3}]}}, @CTA_LABELS_MASK={0x1c, 0x17, [0x1fa96f9f, 0x6, 0x6, 0x9, 0x0, 0x1]}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x530}]}, @CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1000}]}}, @CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x14, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x4}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xa3}]}}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xec}}, 0x4000000)

21:46:12 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:46:12 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x1d}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 1893.313122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.323418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.327673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.336773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.338896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.344280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.353626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.417074] FAULT_INJECTION: forcing a failure.
[ 1893.417074] name failslab, interval 1, probability 0, space 0, times 0
[ 1893.418800] CPU: 1 UID: 0 PID: 38326 Comm: syz-executor.6 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1893.418832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1893.418846] Call Trace:
[ 1893.418854]  <TASK>
[ 1893.418864]  dump_stack_lvl+0xfa/0x120
[ 1893.418904]  should_fail_ex+0x4d7/0x5e0
[ 1893.418947]  ? __pmd_alloc+0x98/0x980
[ 1893.418981]  should_failslab+0xc2/0x120
[ 1893.419009]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1893.419056]  __pmd_alloc+0x98/0x980
[ 1893.419088]  ? lock_release+0xc8/0x290
[ 1893.419119]  __handle_mm_fault+0xcae/0x30f0
[ 1893.419154]  ? mt_find+0x64c/0x870
[ 1893.419189]  ? __pfx_mt_find+0x10/0x10
[ 1893.419224]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1893.419279]  ? find_vma+0xbf/0x140
[ 1893.419307]  ? __pfx_find_vma+0x10/0x10
[ 1893.419342]  handle_mm_fault+0x2c3/0x900
[ 1893.419378]  ? access_error+0x17d/0x380
[ 1893.419403]  ? lock_mm_and_find_vma+0xaa/0x6f0
[ 1893.419434]  do_user_addr_fault+0x395/0xeb0
[ 1893.419477]  exc_page_fault+0xb0/0x180
[ 1893.419510]  asm_exc_page_fault+0x26/0x30
[ 1893.419533] RIP: 0010:rep_movs_alternative+0x54/0x90
[ 1893.419561] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 cf 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29
[ 1893.419584] RSP: 0018:ffff88803b36f980 EFLAGS: 00050206
[ 1893.419604] RAX: 0000000000000000 RBX: 0000000000000100 RCX: 0000000000000100
[ 1893.419618] RDX: ffffed100766df62 RSI: ffff88803b36fa10 RDI: 0000000020000000
[ 1893.419634] RBP: 0000000020000000 R08: 0000000000000000 R09: ffffed100766df61
[ 1893.419648] R10: ffff88803b36fb0f R11: 0000000000000000 R12: ffff88803b36fa10
[ 1893.419663] R13: 0000000020000100 R14: 00007ffffffff000 R15: 0000000000000000
[ 1893.419697]  _copy_to_user+0xbe/0xd0
[ 1893.419726]  con_get_trans_old+0x1df/0x290
[ 1893.419761]  ? __pfx_con_get_trans_old+0x10/0x10
[ 1893.419787]  ? avc_has_perm_noaudit+0x150/0x3d0
[ 1893.419851]  ? cap_capable+0xdb/0x3b0
[ 1893.419884]  ? security_capable+0x2f/0x90
[ 1893.419916]  vt_ioctl+0xcaa/0x2db0
[ 1893.419951]  ? __pfx_vt_ioctl+0x10/0x10
[ 1893.419980]  ? lock_acquire+0x15e/0x2f0
[ 1893.420006]  ? get_pid_task+0x29/0x250
[ 1893.420044]  ? find_held_lock+0x2b/0x80
[ 1893.420084]  ? get_pid_task+0xfd/0x250
[ 1893.420121]  ? lock_release+0xc8/0x290
[ 1893.420153]  ? get_pid_task+0x107/0x250
[ 1893.420191]  ? proc_fail_nth_write+0x97/0x220
[ 1893.420216]  ? find_held_lock+0x2b/0x80
[ 1893.420250]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1893.420284]  ? __pfx_vt_ioctl+0x10/0x10
[ 1893.420315]  tty_ioctl+0x78b/0x1810
[ 1893.420347]  ? __pfx_tty_ioctl+0x10/0x10
[ 1893.420375]  ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0
[ 1893.420404]  ? __mutex_unlock_slowpath+0x111/0x7b0
[ 1893.420438]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1893.420470]  ? debug_mutex_add_waiter+0xb0/0x1d0
[ 1893.420504]  ? __fget_files+0x34/0x3b0
[ 1893.420541]  ? find_held_lock+0x2b/0x80
[ 1893.420575]  ? __fget_files+0x203/0x3b0
[ 1893.420612]  ? lock_release+0xc8/0x290
[ 1893.420647]  ? selinux_file_ioctl+0xb9/0x280
[ 1893.420677]  ? __pfx_tty_ioctl+0x10/0x10
[ 1893.420708]  __x64_sys_ioctl+0x18f/0x210
[ 1893.420745]  do_syscall_64+0xbf/0x360
[ 1893.420782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1893.420805] RIP: 0033:0x7f5b158fcb19
[ 1893.420822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1893.420844] RSP: 002b:00007f5b12e72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1893.420865] RAX: ffffffffffffffda RBX: 00007f5b15a0ff60 RCX: 00007f5b158fcb19
[ 1893.420880] RDX: 0000000020000000 RSI: 0000000000004b40 RDI: 0000000000000003
[ 1893.420895] RBP: 00007f5b12e721d0 R08: 0000000000000000 R09: 0000000000000000
[ 1893.420909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1893.420923] R13: 00007ffcb67f2f1f R14: 00007f5b12e72300 R15: 0000000000022000
[ 1893.420958]  </TASK>
[ 1893.421964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:12 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 4)

[ 1893.653321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.686686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:12 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)

21:46:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x891b, &(0x7f0000000080)={'wlan0\x00', @ifru_flags})
ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0)

[ 1893.817110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:12 executing program 2:
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=ANY=[@ANYBLOB="a4009cbeffffffffffff080211000001"], 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4)

21:46:12 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1893.904380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.929034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:13 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 5)

[ 1893.943819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:13 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1893.957611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.968203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1893.988225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:13 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x1e}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 1894.002942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1894.122904] FAULT_INJECTION: forcing a failure.
[ 1894.122904] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1894.124690] CPU: 1 UID: 0 PID: 38662 Comm: syz-executor.6 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1894.124719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1894.124732] Call Trace:
[ 1894.124739]  <TASK>
[ 1894.124747]  dump_stack_lvl+0xfa/0x120
[ 1894.124785]  should_fail_ex+0x4d7/0x5e0
[ 1894.124824]  should_fail_alloc_page+0xe0/0x110
[ 1894.124852]  prepare_alloc_pages+0x1af/0x500
[ 1894.124879]  ? find_held_lock+0x2b/0x80
[ 1894.124915]  __alloc_frozen_pages_noprof+0x17f/0x1f10
[ 1894.124953]  ? __is_insn_slot_addr+0x140/0x290
[ 1894.124989]  ? kernel_text_address+0x5b/0xc0
[ 1894.125014]  ? __kernel_text_address+0xd/0x40
[ 1894.125037]  ? unwind_get_return_address+0x59/0xa0
[ 1894.125069]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1894.125099]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1894.125146]  ? __lock_acquire+0xc65/0x1b70
[ 1894.125172]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1894.125198]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1894.125226]  ? policy_nodemask+0xeb/0x4e0
[ 1894.125260]  alloc_pages_mpol+0xed/0x340
[ 1894.125291]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1894.125333]  alloc_pages_noprof+0xa1/0x380
[ 1894.125365]  pte_alloc_one+0x1e/0x360
[ 1894.125395]  __pte_alloc+0x6c/0x360
[ 1894.125424]  ? __pfx___pte_alloc+0x10/0x10
[ 1894.125460]  ? _raw_spin_unlock+0x1e/0x40
[ 1894.125484]  ? __pmd_alloc+0x3f9/0x980
[ 1894.125519]  __handle_mm_fault+0x24bf/0x30f0
[ 1894.125550]  ? mt_find+0x64c/0x870
[ 1894.125582]  ? __pfx_mt_find+0x10/0x10
[ 1894.125614]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1894.125663]  ? find_vma+0xbf/0x140
[ 1894.125689]  ? __pfx_find_vma+0x10/0x10
[ 1894.125720]  handle_mm_fault+0x2c3/0x900
[ 1894.125753]  ? access_error+0x17d/0x380
[ 1894.125774]  ? lock_mm_and_find_vma+0xaa/0x6f0
[ 1894.125802]  do_user_addr_fault+0x395/0xeb0
[ 1894.125834]  exc_page_fault+0xb0/0x180
[ 1894.125864]  asm_exc_page_fault+0x26/0x30
[ 1894.125885] RIP: 0010:rep_movs_alternative+0x54/0x90
[ 1894.125911] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 cf 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29
[ 1894.125932] RSP: 0018:ffff88803fb37980 EFLAGS: 00050206
[ 1894.125950] RAX: 0000000000000000 RBX: 0000000000000100 RCX: 0000000000000100
[ 1894.125964] RDX: ffffed1007f66f62 RSI: ffff88803fb37a10 RDI: 0000000020000000
[ 1894.125977] RBP: 0000000020000000 R08: 0000000000000000 R09: ffffed1007f66f61
[ 1894.125991] R10: ffff88803fb37b0f R11: 0000000000000000 R12: ffff88803fb37a10
[ 1894.126004] R13: 0000000020000100 R14: 00007ffffffff000 R15: 0000000000000000
[ 1894.126035]  _copy_to_user+0xbe/0xd0
[ 1894.126061]  con_get_trans_old+0x1df/0x290
[ 1894.126093]  ? __pfx_con_get_trans_old+0x10/0x10
[ 1894.126117]  ? avc_has_perm_noaudit+0x150/0x3d0
[ 1894.126175]  ? cap_capable+0xdb/0x3b0
[ 1894.126219]  ? security_capable+0x2f/0x90
[ 1894.126249]  vt_ioctl+0xcaa/0x2db0
[ 1894.126280]  ? __pfx_vt_ioctl+0x10/0x10
[ 1894.126305]  ? lock_acquire+0x15e/0x2f0
[ 1894.126328]  ? get_pid_task+0x29/0x250
[ 1894.126361]  ? find_held_lock+0x2b/0x80
[ 1894.126392]  ? get_pid_task+0xfd/0x250
[ 1894.126424]  ? lock_release+0xc8/0x290
[ 1894.126453]  ? get_pid_task+0x107/0x250
[ 1894.126486]  ? proc_fail_nth_write+0x97/0x220
[ 1894.126509]  ? find_held_lock+0x2b/0x80
[ 1894.126540]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1894.126569]  ? __pfx_vt_ioctl+0x10/0x10
[ 1894.126598]  tty_ioctl+0x78b/0x1810
[ 1894.126628]  ? __pfx_tty_ioctl+0x10/0x10
[ 1894.126653]  ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0
[ 1894.126679]  ? __mutex_unlock_slowpath+0x111/0x7b0
[ 1894.126710]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1894.126739]  ? debug_mutex_add_waiter+0xb0/0x1d0
[ 1894.126770]  ? __fget_files+0x34/0x3b0
[ 1894.126805]  ? find_held_lock+0x2b/0x80
[ 1894.126835]  ? __fget_files+0x203/0x3b0
[ 1894.126869]  ? lock_release+0xc8/0x290
[ 1894.126901]  ? selinux_file_ioctl+0xb9/0x280
[ 1894.126928]  ? __pfx_tty_ioctl+0x10/0x10
[ 1894.126957]  __x64_sys_ioctl+0x18f/0x210
[ 1894.126990]  do_syscall_64+0xbf/0x360
[ 1894.127023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1894.127044] RIP: 0033:0x7f5b158fcb19
[ 1894.127060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1894.127081] RSP: 002b:00007f5b12e72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1894.127100] RAX: ffffffffffffffda RBX: 00007f5b15a0ff60 RCX: 00007f5b158fcb19
[ 1894.127114] RDX: 0000000020000000 RSI: 0000000000004b40 RDI: 0000000000000003
[ 1894.127127] RBP: 00007f5b12e721d0 R08: 0000000000000000 R09: 0000000000000000
[ 1894.127140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1894.127153] R13: 00007ffcb67f2f1f R14: 00007f5b12e72300 R15: 0000000000022000
[ 1894.127184]  </TASK>
[ 1894.184292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:13 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:46:13 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 6)

[ 1894.309312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1894.323865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1894.336858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1894.476318] FAULT_INJECTION: forcing a failure.
[ 1894.476318] name failslab, interval 1, probability 0, space 0, times 0
[ 1894.477744] CPU: 1 UID: 0 PID: 38851 Comm: syz-executor.6 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1894.477766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1894.477775] Call Trace:
[ 1894.477781]  <TASK>
[ 1894.477787]  dump_stack_lvl+0xfa/0x120
[ 1894.477817]  should_fail_ex+0x4d7/0x5e0
[ 1894.477846]  ? ptlock_alloc+0x21/0x70
[ 1894.477862]  should_failslab+0xc2/0x120
[ 1894.477880]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1894.477912]  ptlock_alloc+0x21/0x70
[ 1894.477927]  pte_alloc_one+0x86/0x360
[ 1894.477951]  __pte_alloc+0x6c/0x360
[ 1894.477972]  ? __pfx___pte_alloc+0x10/0x10
[ 1894.477993]  ? _raw_spin_unlock+0x1e/0x40
[ 1894.478011]  ? __pmd_alloc+0x3f9/0x980
[ 1894.478036]  __handle_mm_fault+0x24bf/0x30f0
[ 1894.478059]  ? mt_find+0x64c/0x870
[ 1894.478083]  ? __pfx_mt_find+0x10/0x10
[ 1894.478106]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1894.478143]  ? find_vma+0xbf/0x140
[ 1894.478162]  ? __pfx_find_vma+0x10/0x10
[ 1894.478185]  handle_mm_fault+0x2c3/0x900
[ 1894.478221]  ? access_error+0x17d/0x380
[ 1894.478237]  ? lock_mm_and_find_vma+0xaa/0x6f0
[ 1894.478258]  do_user_addr_fault+0x395/0xeb0
[ 1894.478281]  exc_page_fault+0xb0/0x180
[ 1894.478303]  asm_exc_page_fault+0x26/0x30
[ 1894.478320] RIP: 0010:rep_movs_alternative+0x54/0x90
[ 1894.478340] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 cf 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29
[ 1894.478355] RSP: 0018:ffff888040c8f980 EFLAGS: 00050206
[ 1894.478368] RAX: 0000000000000000 RBX: 0000000000000100 RCX: 0000000000000100
[ 1894.478378] RDX: ffffed1008191f62 RSI: ffff888040c8fa10 RDI: 0000000020000000
[ 1894.478388] RBP: 0000000020000000 R08: 0000000000000000 R09: ffffed1008191f61
[ 1894.478398] R10: ffff888040c8fb0f R11: 0000000000000000 R12: ffff888040c8fa10
[ 1894.478408] R13: 0000000020000100 R14: 00007ffffffff000 R15: 0000000000000000
[ 1894.478431]  _copy_to_user+0xbe/0xd0
[ 1894.478456]  con_get_trans_old+0x1df/0x290
[ 1894.478480]  ? __pfx_con_get_trans_old+0x10/0x10
[ 1894.478498]  ? avc_has_perm_noaudit+0x150/0x3d0
[ 1894.478541]  ? cap_capable+0xdb/0x3b0
[ 1894.478564]  ? security_capable+0x2f/0x90
[ 1894.478586]  vt_ioctl+0xcaa/0x2db0
[ 1894.478609]  ? __pfx_vt_ioctl+0x10/0x10
[ 1894.478628]  ? lock_acquire+0x15e/0x2f0
[ 1894.478646]  ? get_pid_task+0x29/0x250
[ 1894.478671]  ? find_held_lock+0x2b/0x80
[ 1894.478694]  ? get_pid_task+0xfd/0x250
[ 1894.478718]  ? lock_release+0xc8/0x290
[ 1894.478739]  ? get_pid_task+0x107/0x250
[ 1894.478763]  ? proc_fail_nth_write+0x97/0x220
[ 1894.478780]  ? find_held_lock+0x2b/0x80
[ 1894.478803]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1894.478826]  ? __pfx_vt_ioctl+0x10/0x10
[ 1894.478848]  tty_ioctl+0x78b/0x1810
[ 1894.478869]  ? __pfx_tty_ioctl+0x10/0x10
[ 1894.478888]  ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0
[ 1894.478908]  ? __mutex_unlock_slowpath+0x111/0x7b0
[ 1894.478931]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1894.478953]  ? debug_mutex_add_waiter+0xb0/0x1d0
[ 1894.478975]  ? __fget_files+0x34/0x3b0
[ 1894.479004]  ? find_held_lock+0x2b/0x80
[ 1894.479029]  ? __fget_files+0x203/0x3b0
[ 1894.479053]  ? lock_release+0xc8/0x290
[ 1894.479077]  ? selinux_file_ioctl+0xb9/0x280
[ 1894.479097]  ? __pfx_tty_ioctl+0x10/0x10
[ 1894.479118]  __x64_sys_ioctl+0x18f/0x210
[ 1894.479143]  do_syscall_64+0xbf/0x360
[ 1894.479168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1894.479183] RIP: 0033:0x7f5b158fcb19
[ 1894.479195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1894.479210] RSP: 002b:00007f5b12e72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1894.479224] RAX: ffffffffffffffda RBX: 00007f5b15a0ff60 RCX: 00007f5b158fcb19
[ 1894.479235] RDX: 0000000020000000 RSI: 0000000000004b40 RDI: 0000000000000003
[ 1894.479244] RBP: 00007f5b12e721d0 R08: 0000000000000000 R09: 0000000000000000
[ 1894.479254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1894.479263] R13: 00007ffcb67f2f1f R14: 00007f5b12e72300 R15: 0000000000022000
[ 1894.479286]  </TASK>
[ 1894.508006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:26 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:46:26 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb8, 0x2, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x5, 0x4, 0x5592, 0x2, 0x1]}, @CTA_LABELS_MASK={0x14, 0x17, [0x80000001, 0x3, 0x5, 0x800]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffa}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x800}]}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x8, 0xa4c, 0x3, 0x7ff, 0x1]}]}, 0xb8}}, 0x240c0880)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:46:26 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x41}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:46:26 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:46:26 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:46:26 executing program 2:
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x20c00, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6f99a25340764a38}, 0x20000090)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x8fb}, @device_b, @device_a, @from_mac=@device_b, {0x9, 0x4}}, @ver_80211n={0x0, 0x3, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x3a, @val={0x8c, 0x10, {0x639, "f3dbbceaa9d9", @short="61d08c527b59451c"}}}, 0x30)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000280)=@data_frame={@qos_no_ht={{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @from_mac=@device_b, @device_b, {0x9, 0x7}}, {0x9, 0x0, 0x1, 0x0, 0x2}}, {@type01={{0x0, 0x2, 0xe, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x7}, @device_a, @from_mac=@device_b, @from_mac=@device_b, {0x4, 0x1f}}, {0xf, 0x0, 0x2, 0x1, 0xf8}}}, @a_msdu=[{@broadcast, @device_b, 0xcf, "54bc60e32e0c11996561bf0c129f1d891abdcd90eb2ace53d126054f04f2aba2f9ce289c737ded020a7dd35a3fe3f001b7adac689c03fb43a0029afa8ed6556eebca71162eb06c58998442e422142575cc083a11bafaec9f8e51dcfdaa9137889e5d3ab06d823135fb00ef13e3bb35fb751c31f9ccce70ae65dc69d41fc3e8aecc2fc25e113c73b4dac69ea10926fa6720f8a2c02626031516fc9dea1ccdf989b13d775e1841b7ee3b7272744dfdc03d1e88cb07da8ba4fa2cff2e650cfba1761b1b997da73af276796b06d575b311"}, {@device_a, @device_b, 0xb9, "31ce22ae77375d6a794158ae216ece72ec7c12275bdf1b7b559bf9cd111ed2fae1145fcb4eaba3c8fcc567c5d208b8003f532b5b8f8837638fafc90d20fa60787889f5097347a1d66fff98ef09fa6d2fafdfe41a494df330aead7313ab477eeff8033cf5102980e7dadad00ef75c8beeadd3a7dae96cec3b2589fd5c75f6fb9df03c8cc6e47719933602e0a78564acf3ccb24b75e7e138641faea392ffa86e32bade9acef9408dc256d8aaa267abc4d31d1e19214b5432b26c"}, {@broadcast, @device_b, 0x61, "d00507b588cd23048a4d262da4582521c2bae61a9999ecb19ebdc94e2a4ff0761705eb66b53f3c65d3c78a7cf6ab08ec98120cd11a54e6ad4272018cb604ba2e7034f520f8514a6d2a80c00c009517366b184186c7a10ac195d7735328cf70ae5c"}, {@device_b, @broadcast, 0x72, "002f6e163d7aa72d677d0509cb63603083e2b8e5635ea85b3f5a4de8a5ee3e7abc4c10ac4adfa40895abd2012e655262f1655225bf15c46b147a42125c7fb4c841b16d0bdeda4e116cc100f535c31b530027fbe59c8346ef0302246cd267d64c07fcf46ba467f5cdb03156dfccfd4e262c45"}, {@broadcast, @device_b, 0x1f, "69c142323cdff6819e470de78768115a468bcdd00ba537cc9dd87613e70139"}, {@device_b, @device_b, 0x15, "572d6f21195cc14eef2d41431aaae205d3e733b721"}, {@device_a, @broadcast, 0x6e, "703b5319242d5bd375e00639283e8e9b675b86b3ed4eb1c8736e98eb3b3c54e6aa45b2f221241d92dedb42c8b9c2161691c47465d1e9f0ce453194ad2b110ccc8ae70667b60fd92b3f688addb7065f80f3414db180ad26bbad4a72f9ae73a1e2643a3ae44cf0480de456085b5d82"}, {@device_a, @broadcast, 0xff, "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"}]}, 0x4ac)

21:46:26 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 7)

21:46:26 executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000440)={<r1=>0x0, 0x6, 0x7f, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000840)={r1, 0x8, 0x0, [0x0, 0x1f, 0xf7, 0x1ff, 0xffffffffffffffff], [0xfffffffffffffa6f, 0x1000, 0x3, 0x5, 0x1000, 0x100000000, 0x7fff, 0x9, 0x7, 0x0, 0x90, 0x6, 0x6, 0x9d, 0x37e2, 0x69f, 0x0, 0x401, 0x5, 0x8, 0x7f, 0x8, 0x100000001, 0x5, 0x6, 0x100000001, 0xe366, 0xfffffffffffffffe, 0x2, 0x6, 0x9, 0x1, 0x3, 0x1000, 0x1, 0x2, 0x101, 0x80, 0xfffffffffffffffe, 0x6, 0xffffffffffff0305, 0x101, 0x6, 0x0, 0x0, 0x7f, 0xffffffffffffff00, 0x9, 0x8, 0x7, 0x40, 0xd2, 0x1, 0x7, 0xfffffffffffffffd, 0x81, 0x4ed4, 0xfffffffffffffffd, 0x2, 0xffff, 0xfffffffffffffe01, 0x7, 0x8, 0x5, 0x6, 0x10000, 0x6, 0x5, 0xfffffffffffffff9, 0x9, 0x1, 0x6aa, 0x2, 0x2, 0x7, 0x7, 0x8d02, 0x7, 0x6, 0x20, 0x7fff, 0xa7, 0x1, 0x8, 0x4ab, 0x8, 0xffffffffffffff2e, 0x6, 0xfffffffffffff79e, 0x8000, 0x5, 0x9, 0x80000001, 0x808, 0x3, 0x7, 0xdca5, 0x40, 0xb7, 0x9, 0x9, 0x9, 0x4, 0xffffffff, 0x10001, 0x1ff, 0xfffffffffffffff8, 0x673b, 0x80, 0x7fff, 0xc2, 0x8, 0x1000000000, 0x1, 0x8, 0xa2, 0x1000, 0x7fffffff, 0x80, 0x4, 0x8]})
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x3f)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r3, r4, 0x0, 0x68e146a1)
fcntl$setstatus(r3, 0x4, 0x44000)
ioctl$KDMKTONE(r3, 0x4b30, 0x800)

21:46:26 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 8)

[ 1907.143475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1907.147970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1907.151443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1907.164179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1907.170421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1907.176526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1907.191603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1907.198606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1907.207914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1907.254370] FAULT_INJECTION: forcing a failure.
[ 1907.254370] name failslab, interval 1, probability 0, space 0, times 0
[ 1907.256889] CPU: 1 UID: 0 PID: 38932 Comm: syz-executor.6 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1907.256925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1907.256940] Call Trace:
[ 1907.256949]  <TASK>
[ 1907.256958]  dump_stack_lvl+0xfa/0x120
[ 1907.257000]  should_fail_ex+0x4d7/0x5e0
[ 1907.257046]  ? __anon_vma_prepare+0xae/0x590
[ 1907.257084]  should_failslab+0xc2/0x120
[ 1907.257114]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1907.257164]  __anon_vma_prepare+0xae/0x590
[ 1907.257207]  __vmf_anon_prepare+0x11f/0x250
[ 1907.257247]  __handle_mm_fault+0x13ad/0x30f0
[ 1907.257284]  ? mt_find+0x64c/0x870
[ 1907.257322]  ? __pfx_mt_find+0x10/0x10
[ 1907.257359]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1907.257417]  ? find_vma+0xbf/0x140
[ 1907.257447]  ? __pfx_find_vma+0x10/0x10
[ 1907.257492]  handle_mm_fault+0x2c3/0x900
[ 1907.257531]  ? access_error+0x17d/0x380
[ 1907.257558]  ? lock_mm_and_find_vma+0xaa/0x6f0
[ 1907.257591]  do_user_addr_fault+0x395/0xeb0
[ 1907.257628]  exc_page_fault+0xb0/0x180
[ 1907.257663]  asm_exc_page_fault+0x26/0x30
[ 1907.257688] RIP: 0010:rep_movs_alternative+0x54/0x90
[ 1907.257719] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 cf 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29
[ 1907.257743] RSP: 0018:ffff88803ba17980 EFLAGS: 00050206
[ 1907.257764] RAX: 0000000000000000 RBX: 0000000000000100 RCX: 0000000000000100
[ 1907.257780] RDX: ffffed1007742f62 RSI: ffff88803ba17a10 RDI: 0000000020000000
[ 1907.257797] RBP: 0000000020000000 R08: 0000000000000000 R09: ffffed1007742f61
[ 1907.257813] R10: ffff88803ba17b0f R11: 0000000000000000 R12: ffff88803ba17a10
[ 1907.257829] R13: 0000000020000100 R14: 00007ffffffff000 R15: 0000000000000000
[ 1907.257865]  _copy_to_user+0xbe/0xd0
[ 1907.257895]  con_get_trans_old+0x1df/0x290
[ 1907.257932]  ? __pfx_con_get_trans_old+0x10/0x10
[ 1907.257960]  ? avc_has_perm_noaudit+0x150/0x3d0
[ 1907.258028]  ? cap_capable+0xdb/0x3b0
[ 1907.258064]  ? security_capable+0x2f/0x90
[ 1907.258098]  vt_ioctl+0xcaa/0x2db0
[ 1907.258135]  ? __pfx_vt_ioctl+0x10/0x10
[ 1907.258164]  ? lock_acquire+0x15e/0x2f0
[ 1907.258193]  ? get_pid_task+0x29/0x250
[ 1907.258233]  ? find_held_lock+0x2b/0x80
[ 1907.258288]  ? get_pid_task+0xfd/0x250
[ 1907.258326]  ? lock_release+0xc8/0x290
[ 1907.258359]  ? get_pid_task+0x107/0x250
[ 1907.258399]  ? proc_fail_nth_write+0x97/0x220
[ 1907.258426]  ? find_held_lock+0x2b/0x80
[ 1907.258462]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1907.258498]  ? __pfx_vt_ioctl+0x10/0x10
[ 1907.258532]  tty_ioctl+0x78b/0x1810
[ 1907.258566]  ? __pfx_tty_ioctl+0x10/0x10
[ 1907.258596]  ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0
[ 1907.258627]  ? __mutex_unlock_slowpath+0x111/0x7b0
[ 1907.258663]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1907.258697]  ? debug_mutex_add_waiter+0xb0/0x1d0
[ 1907.258733]  ? __fget_files+0x34/0x3b0
[ 1907.258774]  ? find_held_lock+0x2b/0x80
[ 1907.258810]  ? __fget_files+0x203/0x3b0
[ 1907.258850]  ? lock_release+0xc8/0x290
[ 1907.258888]  ? selinux_file_ioctl+0xb9/0x280
[ 1907.258920]  ? __pfx_tty_ioctl+0x10/0x10
[ 1907.258953]  __x64_sys_ioctl+0x18f/0x210
[ 1907.258992]  do_syscall_64+0xbf/0x360
[ 1907.259031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1907.259056] RIP: 0033:0x7f5b158fcb19
[ 1907.259075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1907.259098] RSP: 002b:00007f5b12e72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1907.259121] RAX: ffffffffffffffda RBX: 00007f5b15a0ff60 RCX: 00007f5b158fcb19
[ 1907.259138] RDX: 0000000020000000 RSI: 0000000000004b40 RDI: 0000000000000003
[ 1907.259153] RBP: 00007f5b12e721d0 R08: 0000000000000000 R09: 0000000000000000
[ 1907.259169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1907.259183] R13: 00007ffcb67f2f1f R14: 00007f5b12e72300 R15: 0000000000022000
[ 1907.259220]  </TASK>
21:46:26 executing program 4:
syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x200040)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))

21:46:26 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x2, 0x8, 0x7fff, 0x400, 0x11, "657b449c7b6e5a23"})
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

[ 1907.529519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1907.536102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1907.545055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:38 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:46:38 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 9)

21:46:38 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:46:38 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000d80)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000b00)=@broadcast, &(0x7f0000000b40)=@ctrl_frame=@rts={{}, {0x7}, @device_a, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000d80), &(0x7f0000000dc0)=@mgmt_frame=@assoc_req={@wo_ht={{}, {0x9}, @device_a, @device_b, @initial, {0x4, 0x9}}, 0x840, 0x800, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x4, [{0x4, 0x1}, {0x6, 0x1}, {0x1b, 0x1}, {0x6c}]}, @val={0x2d, 0x1a, {0x10, 0x3, 0x1, 0x0, {0x3380000000000, 0x3f, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x8, 0x9}}, [{0xdd, 0x89, "91f633e5ec32b45533d564ed2a91df760eac2147c54a47dc9c286f4a133df46aa5485909d01a82e6091986a50443406cb8a87b5726d3773ee7bc4072be067ae1994599e535769525eb5940eb645fac13133163726add27cdcdd30fed8a68ea933081f560cad4f94dbd3d27f6f338a9b2802ea9c6769195aefc2271ca10850f68150320f9ec6a27ce30"}, {0xdd, 0x9f, "c2a025189b4a1d8a673bc28e566d86eae4eb04bc21ae4b6c39c87e4e483b5e40d8e68a145d242cd04e6443ebdf3765900f161dff2119df2d651961ca635d0038e86e66066f7eca08473d0cd295c2367381af281d4c03f4ce5597252954f30d547229ce3ec4c142b40d2110fac91365ef60465ec0f74d20824be535ee3b95f90639a064b86c29a76065cdaa02047f9c89418773938aedadc77341680a70ba2c"}, {0xdd, 0xa9, "a05965965c36d8caf1e4b0bc7d2f7f31ffe3c445fc99009571fda88c219f476ce6d06f6d42bc386936d8b5abd2519e490a7984b5eeb19b154c186c5741e2b7dd28a2214be63051a2cb5c27b47bdd35a2f22d08a4330c53369c577d6bdba1e199cbbf39433f95c3349920aec03da5719956caa2e463024b013a87042b7725dd75508eee77093475d51f0256b88d4624b8c4c03a55910d295a28edd2bc7879f75175aecae894eade034f"}, {0xdd, 0x60, "e11b6d1a6d9c8cfffc555101a8cf508dda66f5c732992b67629de4724ac18c2e7c26531f62c8043eb6a094a075d0a0ba83c7babe39084c262d9d0e5ebe59a67b117a5d9e472674bab8ba6c0361b9160454984a43d29e696cb2516d83c6692b7e"}]}, 0x27f)
syz_80211_inject_frame(&(0x7f0000000100), &(0x7f0000000300)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @from_mac, @device_a, {0x0, 0x5}}, @random="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"}, 0x5e5)
syz_80211_inject_frame(&(0x7f0000000a00)=@device_b, &(0x7f0000000a40)=@mgmt_frame=@action_no_ack={@wo_ht={{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_a, @device_b, @random="df24f73be409", {0x0, 0x3f}}, @tdls_setup_resp={0xc, 0x1, 0x36, 0x81, @void, @val={0x1, 0x5, [{0x30, 0x1}, {0x6c}, {0x16}, {0x2}, {0x6c}]}, @void, @val={0x65, 0x12, {@initial, @device_b, @device_b}}}}, 0x38)
syz_80211_inject_frame(&(0x7f0000000140)=@device_b, &(0x7f0000000180)=@ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @broadcast, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000280), &(0x7f0000000900)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x7fe1}, @device_a, @initial, @device_b, {0x6, 0xff}}, @a_msdu=[{@device_b, @device_b, 0xa0, "b115912bc9817547cfc532399e808e1e4032e03404ebdcb1c6720394a32bd7377f4caaa0827fc2f92f2034f63d22ef0850524037f02d9e47aaef624840924dc6fac7333cf07b31fc9c051ce2840b362b9b65a7c3195fe92934f3b3b3218cedb0342633ead2ace7befc67af72dcce334b3855953ea3d583b05ab7a1d3b94896d31d330660c72d603233827857c4095752226e8655ee30646f489534cca7c271f0"}, {@device_a, @device_a, 0x21, "174f1b5d22247fcb6d138ffc1da8507e33c40d8ecca994a2c9863edd02e5da1e09"}]}, 0xf8)
syz_80211_inject_frame(&(0x7f0000000a80)=@device_b, &(0x7f0000000ac0)=@ctrl_frame=@ack={{}, {0x3}}, 0xa)
syz_80211_inject_frame(&(0x7f0000000b80), &(0x7f0000001040)=@mgmt_frame=@probe_response={@wo_ht={{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x20}, @device_a, @broadcast, @random="ceeb7a54b74b", {0x4, 0x3}}, 0x9, @default, 0xa00, @void, @val={0x1, 0x2, [{0x1}, {0xc}]}, @val={0x3, 0x1, 0x3}, @void, @val={0x6, 0x2, 0x4000}, @val={0x2d, 0x1a, {0x8, 0x3, 0x6, 0x0, {0x7ff, 0x8, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x3ff, 0x1}}, @void, @void, [{0xdd, 0x5b, "4b92ddd8be5b212c5493b7702922b6a6b4fae9c3a4b6a43fc2fff878d6f67c4d78d54772601fa25e3b07e992ac1a5d39d2a0224833255481f0b0abaeb2d8c38abffd3c5a76cdd3bbbe9149b3ff7bf628a192c4f21b20a06d03b8fc"}, {0xdd, 0xd5, "ea4aa3da8357114a06d36d70f563ee62a36cee8d31bf05ac6447b02d823db93991f3ddd9b02058d3f0d21dfcef51c91d10355d26068e2cead2489061de42310f314c404beb0f973120eab7f2e32c8b3c5f9cf6cfdfb66a2acbf6152976d3cb4a90bb5be32271fb74e822f0703e3b168690ebe56722cac5f3cdf180a4b5ef277f41add55f3c125dd5ed49acd666ca9c942bb5fc5533a18872cb52ab4a728466164b8a31930ed19e6d167e3e38602cc55e10807e42e353868943b6173396067a447b97c12215565f31b6a1941401a148268456b36e9d"}, {0xdd, 0xbe, "8705fb207a34543949da5f25c0851138630b218550207e529347527abc7662c3f40059cdf0080ca5f707a2fe310b1890da59286fbc5d5305c73fe3ed1d56f67bb7b925daf3bccd19e0d1656982925244e807d14ee591edde092ee9d98f86a5f30e36369b0d2fb3f7b96958ea88b905f28d25777f4d9dacdf28ca4824c9ac29bdd71d9eb2d6d514cc1801f0157b268455a420ae60fdffa841f9ea3b7c59311cd1f8e47cd03bb3bf2a446e858dc39d2fcbc6f7658cfd0f74a16eed4fda7de9"}, {0xdd, 0x65, "44178c4935d1f7a843b68a1d3c229857a325b4b99461a695fa0aaf6179158c513286ddf76951d5a296097d499ddd387425376c396887eb74693b7db5486045dc4105242891a085fdfc14056821ce54035ba161843ac75124b82f6d03f446ff697310255ddc"}, {0xdd, 0xac, "deda30527ad284f04894103d192ac34cab028cc2d6c2bdcf9d5920e79254d05240142a607e7598daf3c10e6da0d72b53b37288b2b5b8a7c6d8b87cfc9769b169c92c2633065378afccc87f4f0daba9205afc1cdda4daa66090de74193c60962acba4cc7bdbf62f91448d9316c437b739068f22d580d3e99d554d309db6393a35d7c3ec9db1040ca315e16b2104d1cf5fa1948b1bf0880213575844ce2e1ea6eeae393bea141b9d449337fbb9"}, {0xdd, 0x8a, "939e1396418866ee8f6dcc9b8785dff161f0de2d215cedfeaf41a2c4180df0e1c188fe2c480f91ab2af5c9ed5b60e7c99849c9788f131e4d8f88176beec525cc3afa5148a6f1949aa6aea513e5ea5113db564b3d3ea1625c7da7ab7151223a8506d721be83d804163b077c2a17b85ea55b0ecd17e32108785e64b15ac230b9d82606aeb2a56c0afd9dd5"}, {0xdd, 0xb8, "c1da2005b3d9320ec3ed1cb2e85e099c7beafcf9bb43e99d96c94779089ab8875cb3a2b1c2582e28f635b50089009bd26d4228d50db9c2227156aee8b61f814fe3de18899e7011b528c5bbf06ea333c18b9543691fb0537242a51343dab1ef9ad5fc8a39b88c1d4521e316288bd7a6e17b0e477036d302e713d2f2bae2460dd0cda18a3284b48fbdc5de0b0e3dcdca9b30c7d8dc9c6d375e3d2ee5e32b11de77d73834504615c2ca78da58a29081c7fdd00256b7e8244662"}]}, 0x49a)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @device_b}, @a_msdu=[{@broadcast, @device_b, 0xb6, "c5f6789db59a8822afa5af665ff923cf6e4d486559e44c40a14d122ab51df12c8454d17e8cd9602680bb4fc5ecb368e572114d0868ee77e13021c764b11eb586d61f0c35a33db6d41a7f355c3d2feb32fbf9894918af76d30f1575aa24ebae19846c4067e2baf2263f5c92911ce0f7d7a4783252ff25422dde4dc522955dd57ab25671d6e36710338733b46da605cc0da9525f5586279de3284786bd46f78c5af281d083bd8fd4d03e09e033afa81debf418e41cd184"}]}, 0xfffffffffffffea9)

21:46:38 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:46:38 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080))

21:46:38 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x60}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:46:38 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1919.217900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.228566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.238353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.249744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.258148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.259881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.283273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.297361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.301123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:38 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r2 = syz_io_uring_complete(0x0)
r3 = getuid()
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@initdev}, 0x0, @in=@loopback}}, &(0x7f00000002c0)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x100)
r6 = getegid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, <r7=>0xee01}}, './file0\x00'})
fsetxattr$system_posix_acl(r2, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="02000000010001000000000002000d00", @ANYRES32=r3, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040002000000000008000200", @ANYRES32=0xee00, @ANYBLOB="e2ffa2ca3d0ea33d01000000", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0xee01, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="10000300000000002000010000000000"], 0x64, 0x2)

[ 1919.314278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.327403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.341414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:38 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x10c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x9, 0x0, 0x9}, [@CTA_NAT_DST={0x94, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3d}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @CTA_TUPLE_REPLY={0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3f}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x200}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x80}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_LABELS_MASK={0xc, 0x17, [0x0, 0x4]}, @CTA_LABELS_MASK={0x20, 0x17, [0x42e780d4, 0x6, 0x8, 0x4, 0x0, 0xffffffc1, 0x7fffffff]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x28004}, 0x400e811)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

[ 1919.361562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.389127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.402309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:38 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 10)

[ 1919.528369] FAULT_INJECTION: forcing a failure.
[ 1919.528369] name failslab, interval 1, probability 0, space 0, times 0
[ 1919.529444] CPU: 0 UID: 0 PID: 39334 Comm: syz-executor.6 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1919.529465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1919.529473] Call Trace:
[ 1919.529479]  <TASK>
[ 1919.529485]  dump_stack_lvl+0xfa/0x120
[ 1919.529514]  should_fail_ex+0x4d7/0x5e0
[ 1919.529545]  ? __anon_vma_prepare+0x2ee/0x590
[ 1919.529565]  should_failslab+0xc2/0x120
[ 1919.529584]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 1919.529622]  __anon_vma_prepare+0x2ee/0x590
[ 1919.529652]  __vmf_anon_prepare+0x11f/0x250
[ 1919.529678]  __handle_mm_fault+0x13ad/0x30f0
[ 1919.529699]  ? mt_find+0x64c/0x870
[ 1919.529723]  ? __pfx_mt_find+0x10/0x10
[ 1919.529745]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1919.529798]  ? find_vma+0xbf/0x140
[ 1919.529815]  ? __pfx_find_vma+0x10/0x10
[ 1919.529842]  handle_mm_fault+0x2c3/0x900
[ 1919.529865]  ? access_error+0x17d/0x380
[ 1919.529880]  ? lock_mm_and_find_vma+0xaa/0x6f0
[ 1919.529903]  do_user_addr_fault+0x395/0xeb0
[ 1919.529933]  exc_page_fault+0xb0/0x180
[ 1919.529957]  asm_exc_page_fault+0x26/0x30
[ 1919.529971] RIP: 0010:rep_movs_alternative+0x54/0x90
[ 1919.529988] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 cf 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29
[ 1919.530001] RSP: 0018:ffff888039a17980 EFLAGS: 00050206
[ 1919.530012] RAX: 0000000000000000 RBX: 0000000000000100 RCX: 0000000000000100
[ 1919.530021] RDX: ffffed1007342f62 RSI: ffff888039a17a10 RDI: 0000000020000000
[ 1919.530029] RBP: 0000000020000000 R08: 0000000000000000 R09: ffffed1007342f61
[ 1919.530038] R10: ffff888039a17b0f R11: 0000000000000000 R12: ffff888039a17a10
[ 1919.530046] R13: 0000000020000100 R14: 00007ffffffff000 R15: 0000000000000000
[ 1919.530085]  _copy_to_user+0xbe/0xd0
[ 1919.530108]  con_get_trans_old+0x1df/0x290
[ 1919.530137]  ? __pfx_con_get_trans_old+0x10/0x10
[ 1919.530152]  ? avc_has_perm_noaudit+0x150/0x3d0
[ 1919.530220]  ? cap_capable+0xdb/0x3b0
[ 1919.530246]  ? security_capable+0x2f/0x90
[ 1919.530274]  vt_ioctl+0xcaa/0x2db0
[ 1919.530301]  ? __pfx_vt_ioctl+0x10/0x10
[ 1919.530316]  ? lock_acquire+0x15e/0x2f0
[ 1919.530356]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1919.530375]  ? lock_release+0xc8/0x290
[ 1919.530397]  ? perf_trace_run_bpf_submit+0xef/0x180
[ 1919.530430]  ? perf_trace_lock_acquire+0x3c2/0x700
[ 1919.530446]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1919.530471]  ? __pfx_vt_ioctl+0x10/0x10
[ 1919.530494]  tty_ioctl+0x78b/0x1810
[ 1919.530517]  ? __pfx_tty_ioctl+0x10/0x10
[ 1919.530534]  ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0
[ 1919.530550]  ? __mutex_unlock_slowpath+0x111/0x7b0
[ 1919.530572]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1919.530593]  ? debug_mutex_add_waiter+0xb0/0x1d0
[ 1919.530613]  ? __fget_files+0x34/0x3b0
[ 1919.530637]  ? find_held_lock+0x2b/0x80
[ 1919.530658]  ? __fget_files+0x203/0x3b0
[ 1919.530680]  ? lock_release+0xc8/0x290
[ 1919.530713]  ? selinux_file_ioctl+0xb9/0x280
[ 1919.530735]  ? __pfx_tty_ioctl+0x10/0x10
[ 1919.530757]  __x64_sys_ioctl+0x18f/0x210
[ 1919.530784]  do_syscall_64+0xbf/0x360
[ 1919.530809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1919.530823] RIP: 0033:0x7f5b158fcb19
[ 1919.530833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1919.530846] RSP: 002b:00007f5b12e72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1919.530858] RAX: ffffffffffffffda RBX: 00007f5b15a0ff60 RCX: 00007f5b158fcb19
[ 1919.530866] RDX: 0000000020000000 RSI: 0000000000004b40 RDI: 0000000000000003
[ 1919.530875] RBP: 00007f5b12e721d0 R08: 0000000000000000 R09: 0000000000000000
[ 1919.530883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1919.530891] R13: 00007ffcb67f2f1f R14: 00007f5b12e72300 R15: 0000000000022000
[ 1919.530931]  </TASK>
[ 1919.567866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:38 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000))
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:46:38 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:46:38 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:46:38 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 1919.715490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.723240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:38 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 1919.757002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:38 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 11)

[ 1919.911544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.913286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.947254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1919.971399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1920.006066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1920.040693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:46:39 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 12)

[ 1920.445777] FAULT_INJECTION: forcing a failure.
[ 1920.445777] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1920.447410] CPU: 1 UID: 0 PID: 39559 Comm: syz-executor.6 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 1920.447438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1920.447455] Call Trace:
[ 1920.447462]  <TASK>
[ 1920.447470]  dump_stack_lvl+0xfa/0x120
[ 1920.447507]  should_fail_ex+0x4d7/0x5e0
[ 1920.447546]  should_fail_alloc_page+0xe0/0x110
[ 1920.447572]  prepare_alloc_pages+0x1af/0x500
[ 1920.447596]  ? unwind_next_frame+0x3bc/0x2540
[ 1920.447626]  ? do_syscall_64+0xbf/0x360
[ 1920.447659]  __alloc_frozen_pages_noprof+0x17f/0x1f10
[ 1920.447690]  ? unwind_get_return_address+0x59/0xa0
[ 1920.447724]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1920.447756]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1920.447795]  ? perf_trace_lock_acquire+0xc9/0x700
[ 1920.447824]  ? __lock_acquire+0xc65/0x1b70
[ 1920.447846]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1920.447873]  ? policy_nodemask+0xeb/0x4e0
[ 1920.447905]  alloc_pages_mpol+0xed/0x340
[ 1920.447933]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 1920.447961]  ? lock_release+0xc8/0x290
[ 1920.447981]  ? find_held_lock+0x2b/0x80
[ 1920.448010]  ? get_vma_policy+0x23b/0x350
[ 1920.448043]  vma_alloc_folio_noprof+0xe9/0x440
[ 1920.448074]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 1920.448114]  __handle_mm_fault+0x142c/0x30f0
[ 1920.448144]  ? mt_find+0x64c/0x870
[ 1920.448173]  ? __pfx_mt_find+0x10/0x10
[ 1920.448202]  ? __pfx___handle_mm_fault+0x10/0x10
[ 1920.448247]  ? find_vma+0xbf/0x140
[ 1920.448270]  ? __pfx_find_vma+0x10/0x10
[ 1920.448299]  handle_mm_fault+0x2c3/0x900
[ 1920.448328]  ? access_error+0x17d/0x380
[ 1920.448348]  ? lock_mm_and_find_vma+0xaa/0x6f0
[ 1920.448374]  do_user_addr_fault+0x395/0xeb0
[ 1920.448402]  exc_page_fault+0xb0/0x180
[ 1920.448430]  asm_exc_page_fault+0x26/0x30
[ 1920.448449] RIP: 0010:rep_movs_alternative+0x54/0x90
[ 1920.448473] Code: 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 eb 05 e9 cf 9c 03 00 48 8b 06 <48> 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 c7 48 01 c6 48 29
[ 1920.448492] RSP: 0018:ffff88804364f980 EFLAGS: 00050206
[ 1920.448508] RAX: 0000000000000000 RBX: 0000000000000100 RCX: 0000000000000100
[ 1920.448521] RDX: ffffed10086c9f62 RSI: ffff88804364fa10 RDI: 0000000020000000
[ 1920.448534] RBP: 0000000020000000 R08: 0000000000000000 R09: ffffed10086c9f61
[ 1920.448547] R10: ffff88804364fb0f R11: 0000000000000000 R12: ffff88804364fa10
[ 1920.448560] R13: 0000000020000100 R14: 00007ffffffff000 R15: 0000000000000000
[ 1920.448587]  _copy_to_user+0xbe/0xd0
[ 1920.448612]  con_get_trans_old+0x1df/0x290
[ 1920.448642]  ? __pfx_con_get_trans_old+0x10/0x10
[ 1920.448663]  ? avc_has_perm_noaudit+0x150/0x3d0
[ 1920.448716]  ? cap_capable+0xdb/0x3b0
[ 1920.448744]  ? security_capable+0x2f/0x90
[ 1920.448771]  vt_ioctl+0xcaa/0x2db0
[ 1920.448800]  ? __pfx_vt_ioctl+0x10/0x10
[ 1920.448822]  ? lock_acquire+0x15e/0x2f0
[ 1920.448843]  ? get_pid_task+0x29/0x250
[ 1920.448875]  ? find_held_lock+0x2b/0x80
[ 1920.448903]  ? get_pid_task+0xfd/0x250
[ 1920.448932]  ? lock_release+0xc8/0x290
[ 1920.448958]  ? get_pid_task+0x107/0x250
[ 1920.448988]  ? proc_fail_nth_write+0x97/0x220
[ 1920.449010]  ? find_held_lock+0x2b/0x80
[ 1920.449037]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1920.449064]  ? __pfx_vt_ioctl+0x10/0x10
[ 1920.449090]  tty_ioctl+0x78b/0x1810
[ 1920.449118]  ? __pfx_tty_ioctl+0x10/0x10
[ 1920.449141]  ? ioctl_has_perm.constprop.0.isra.0+0x331/0x4e0
[ 1920.449165]  ? __mutex_unlock_slowpath+0x111/0x7b0
[ 1920.449194]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1920.449221]  ? debug_mutex_add_waiter+0xb0/0x1d0
[ 1920.449249]  ? __fget_files+0x34/0x3b0
[ 1920.449280]  ? find_held_lock+0x2b/0x80
[ 1920.449308]  ? __fget_files+0x203/0x3b0
[ 1920.449339]  ? lock_release+0xc8/0x290
[ 1920.449368]  ? selinux_file_ioctl+0xb9/0x280
[ 1920.449393]  ? __pfx_tty_ioctl+0x10/0x10
[ 1920.449418]  __x64_sys_ioctl+0x18f/0x210
[ 1920.449449]  do_syscall_64+0xbf/0x360
[ 1920.449479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1920.449498] RIP: 0033:0x7f5b158fcb19
[ 1920.449513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1920.449531] RSP: 002b:00007f5b12e72188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1920.449549] RAX: ffffffffffffffda RBX: 00007f5b15a0ff60 RCX: 00007f5b158fcb19
[ 1920.449562] RDX: 0000000020000000 RSI: 0000000000004b40 RDI: 0000000000000003
[ 1920.449575] RBP: 00007f5b12e721d0 R08: 0000000000000000 R09: 0000000000000000
[ 1920.449587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1920.449599] R13: 00007ffcb67f2f1f R14: 00007f5b12e72300 R15: 0000000000022000
[ 1920.449627]  </TASK>
[ 1923.122379] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1923.126869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1923.130809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1923.138234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1923.143169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1925.211684] Bluetooth: hci3: command tx timeout
[ 1927.259995] Bluetooth: hci3: command tx timeout
[ 1929.307740] Bluetooth: hci3: command tx timeout
[ 1931.356652] Bluetooth: hci3: command tx timeout
[ 1950.963888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1950.965007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1951.006031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1951.007268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1951.442269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.451359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.456001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.461194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.467192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.472249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.476141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.481693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.486891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.493498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.801058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.804507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.811553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.817777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1951.826286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1954.412144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1954.416046] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1954.418984] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1954.425113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1954.430150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1956.508614] Bluetooth: hci3: command tx timeout
[ 1958.555605] Bluetooth: hci3: command tx timeout
[ 1960.603691] Bluetooth: hci3: command tx timeout
[ 1962.651801] Bluetooth: hci3: command tx timeout
[ 1977.449920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1977.450580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1977.489115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1977.489890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1977.730786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1977.734138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1977.748962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1980.289883] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1980.295993] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1980.325604] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1980.332716] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1980.339097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1982.363624] Bluetooth: hci3: command tx timeout
[ 1984.415512] Bluetooth: hci3: command tx timeout
[ 1986.459527] Bluetooth: hci3: command tx timeout
[ 1988.507676] Bluetooth: hci3: command tx timeout
[ 2008.250363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2008.253295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2008.333371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2008.334490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2008.801901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2008.809992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2008.819672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2008.824421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2008.828679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2008.833239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2008.836698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2008.841225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2008.844353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2008.848278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2009.153025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2009.158570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2009.165739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2009.171183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2009.181970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2009.188826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2009.194428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2009.199665] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2011.842244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2011.850911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2011.858944] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2011.865714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2011.869034] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2013.915553] Bluetooth: hci3: command tx timeout
[ 2015.963631] Bluetooth: hci3: command tx timeout
[ 2018.011532] Bluetooth: hci3: command tx timeout
[ 2020.059542] Bluetooth: hci3: command tx timeout
[ 2040.231135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2040.232959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2040.364993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2040.366119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2040.985760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2040.994536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.000148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.009416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.017615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.034262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.040857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.046606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.052923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.058752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.364350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.372195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.380243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.383963] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2041.389642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:48:53 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:48:53 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x2}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:48:53 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r3, 0xffffffffffffffff, 0x0)
sendfile(r2, r3, 0x0, 0x1)
write$binfmt_script(r1, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r4, 0xffffffffffffffff, 0x0)
sendfile(r4, r0, 0x0, 0x1)
ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x2})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:48:53 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:48:53 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @device_b, {}, @device_b}}, 0x1e)

21:48:53 executing program 4:
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000040))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:48:53 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40) (fail_nth: 13)

21:48:53 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2054.239523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2054.297400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2054.300775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2054.312370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2054.321569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2054.321651] FAULT_INJECTION: forcing a failure.
[ 2054.321651] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2054.324041] CPU: 0 UID: 0 PID: 41427 Comm: syz-executor.6 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 2054.324060] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2054.324070] Call Trace:
[ 2054.324075]  <TASK>
[ 2054.324081]  dump_stack_lvl+0xfa/0x120
[ 2054.324112]  should_fail_ex+0x4d7/0x5e0
[ 2054.324144]  _copy_to_user+0x32/0xd0
[ 2054.324166]  simple_read_from_buffer+0xe0/0x180
[ 2054.324195]  proc_fail_nth_read+0x18a/0x240
[ 2054.324215]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2054.324235]  ? security_file_permission+0x22/0x90
[ 2054.324260]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2054.324277]  vfs_read+0x1eb/0xbe0
[ 2054.324304]  ? __pfx_vfs_read+0x10/0x10
[ 2054.324323]  ? lock_release+0xc8/0x290
[ 2054.324350]  ? __fget_files+0x20d/0x3b0
[ 2054.324393]  ksys_read+0x121/0x240
[ 2054.324408]  ? __pfx_ksys_read+0x10/0x10
[ 2054.324445]  do_syscall_64+0xbf/0x360
[ 2054.324471]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2054.324485] RIP: 0033:0x7f5b158af69c
[ 2054.324497] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2054.324510] RSP: 002b:00007f5b12e72170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2054.324523] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b158af69c
[ 2054.324532] RDX: 000000000000000f RSI: 00007f5b12e721e0 RDI: 0000000000000004
[ 2054.324540] RBP: 00007f5b12e721d0 R08: 0000000000000000 R09: 0000000000000000
[ 2054.324548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2054.324556] R13: 00007ffcb67f2f1f R14: 00007f5b12e72300 R15: 0000000000022000
[ 2054.324596]  </TASK>
[ 2054.348026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2054.374364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2054.398909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:48:53 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xcf3, 0x9, &(0x7f0000002580)=[{&(0x7f00000000c0)="fad4b88c7418eb412da26c7505e67cc70b370f0bffa29f57d5af53da7e2b71c61a2c85b22ed9ca988d2d5ba57cea8b", 0x2f, 0x8}, {&(0x7f0000000100)="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", 0xfd, 0x1000}, {&(0x7f0000000200)="2b33e5abe6b5ef6754602505f23cdab4211e39caae98f2a6837d0ac8f0037b83e5d085e43ae58a7b93f015abbf5d613d17afc493df9f1655bf8bb7be28037d689f0087176f8947", 0x47, 0x3}, {&(0x7f0000000280)="ad2a077a17cfbc711937aa9b680a0243759906ab0da55399b4fffaaa5565bbfaf7940a27ad05d99dfae04808f9fac1cb1b4b244fd1ba632ae0bb2e79c6398ba8069f6936c5dd5be0522f7d55e3c4766a2cefbb98a547a0ec3d13cb69949614fc6d9abf8e8c81ec53d5bab0837d3aae71a1bf3ab75b9b90bc1b57a1405cec79f3b73627cacfe8c825b3b64eac94260a7781e2e63d95a5f958f19b8856e7e6d72f29dc3c38d24c4d100dc5bdc4f3b310be6224f0607126c09505fa91121d0409962a97c1dce3e6747328bbbb6fa3510ba9ec89961c4e339f672566", 0xda, 0x5}, {&(0x7f0000000380)="816a6297911b4af08a1e3347eb5b1338e0688975dfc06552442e8a2445eb83a8f9522acc8982580a1766b12c296b171cc86bd4b25ca514d7ab5dddfc9eeab350b13307f64e8785a4d5f8dc36b01524e53076db1b84d673421e7e4e0de96ae63f9dbf02ac5c52d486d56f03420f8154cf7ba7763eb195943079", 0x79, 0x9}, {&(0x7f0000000400)="96deeb45bb3fd81159974c0b74f596c3fffeea5ea5b60735ff0893136c1c1db1082011a6b54fc724c2733fbd5ca6b93f6825f0dfc72cdaad35a0b0284f95eced29797cf7186e385f9b1ecb90e7b5bc4777377edafe4ae586fe227f083616ac444ead5b748af6b574dde6c7ddbf60bc71788b7c4df86375e11a0881f28dd2cb0fe0722669176be6cc189ef4803239fad7af57e7bd50fbed854371d2f2ddcf1ab3dd1b64", 0xa3, 0x6}, {&(0x7f00000004c0)="d4b8d7cdf3cbd32c38d6b33e72bf5e788cb61e6545cb3de6a59f61f497ba5b2867a5eca166373581b8ec3133110138c50e88f60e7762fcdf3b6ffb24ecc902aa360c35ece74edf9e46191ce6993e6982b9ceb1ea2f7fd7f5be46fa22afccda1520c7b341b35ea941eb909854f4d70c03edb2c76eed2bcd27acf03843b1e77d08028ed5373869d557f1cb09e03083523c3a794904ad59a89eebcd3ba77e0a2a8a83759ebac1dba8c21fc498", 0xab, 0xd6}, {&(0x7f0000000580)="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", 0x1000, 0x20}, {&(0x7f0000001580)="d4467351f444a20bc67df2d12ba9f73a24db6003eb161b6dbfc7c663b83b32068bdb8766e2b954a4da8e0f10c9395f16c0fe574ea5911cf8411bd8a4fbb468d7dd846bb78e310d88a6442445c2aa7cea8d9f45d7a56ac5ed1e28220fa1c0691b7f1f4f0a3fdb79444d547fb8e00516ae019ebdfd73e70c0e90c986a5e345845046718b2a7773e5a6ccfeeed8344b8023b709ad409ef4eeab2bafd5e91087e46fcdc609e13d3aa7310696d65bfd8e8afe3800ae1c08a24cc021a481c9d645e4f349cf16d5919dafa150ec0ce693922d6003d9cfe0eb4a6dc71e144784274deac5f483a5f916ad78b090ccd35473a9995833b8a69b39e66e9e4e350f1531ba38d85a808df30d72a8968494aa2c4c01b2be96b6ae4e500ffa39eecd87f34c32db9c17a0745fbf14e0263190386b152ebf9d145567fd7f47c2b41a66c008c4d364572ac14d815e419edea9a25e3c8a93295fdd6e683d2171ca17eeba3e91a86eaec7dd25a3b4875429a36c07b6e3d2ea951e0efee1cf9dbebe2422ca0556307859a80bef6c68ff85c210797ec618548fbe29847922f3d8e34958cfd1cdd888a2dfd058319f06dc7ada95da629455574c25694b445ba1b9be99320c0bee540e6a0e407fd2edf6de88125ff02561096711603c1c24899f69f0b3af0fd054fbede65120bb1b40594ad86b39a71ae1ae2ffe7a6081a24537f0e54a5583ff6fa8dda6de4098723837be94e9bdd7539262c26c0f7fc1176bd77ae7edb6c705128b222fac2bf3b423bb2cf6220d632c55e0616a92f9f4195774b74805b20c8077fdbaeb0dd1c90d968171aed1a9809574bceb6366c406c8839ea135eee462630f3f999e7efea650bf5c82c47d9195e08c693b9fa8d2a33d288ecaa2c1e86b336b6f1f04f021f99565c488f26298b232dbcf908f8e19a6633d11fa1b7e032b5122c2ccbc679badf030b125e66cef9cf4178f83048d6c6f9d084471a268f9bdfd713516c167a5899b4f9b7c3302e7878cc4cf59241910df3ccf60deea96a32876ca454eeb62a6aea84e00124e9680adfda988466e09092a685cdf4d398496e97c04f135136d47278b838272971750ec595a6d3767a41740478f40d90b550b61581d69a7a760594ed8edfd752a883da2d4eba51d5090b004c2950e0699be4121aab07d2d4b2f867c9a126e212ff9967fe0d5eaa7544340896fa8d067df4c20de8faba577233cc14593bb901149cb72790c8f5c414b5d15b4549f0f6b7cfe6c5e1cd4d99c163cc072179de8a3aac9f379a39e819ddea105766192e40c4ba67dfe733aa0a2f4e6b9dbf4e59c5299fa27a58a8ead55f61c450a152e5223f0fd5baadb85c0fe31cb6a9212518f989a46d40174e0431fabdf75a36a6aec5a3a5825b18ce2f447b3cd24ff4ba5cee6a0fa1021ee8f1fd50d15e61fd09c27e45ca766527ad6312b263e623ac96f385a28ce5ff97dd15c3e5b7db88c832c3d410bc9235cdaad68d846a823e92d3e6dc8eb6a4530c362857b08e47d7ed77757ee29d9980ef6cfd98c6f714ccb451ce0e772d3655c0258df7ba7acb128c1d203546b857c95ef88b2908694dcb2c1a66764519c237471f26e1287a2fdd8b16b3678fe0092778b98b28ced7750cad80fcb068e896198b3fc35432e0f31d9ca8b5431a85dd573f1a1596caaaf6b120de30492ddf426127230250409b9ed815e9386d1407e5c8bb5c9274bd3f4c295c972b016a181923c3744c160a7046fa8bba01c325a83b1076ce3ff4710cdd90b092ff2debdd20a578c5c7283d6cd73883d5c9fe964a3266144b05bdb3ca9c3d75082c10d504c445a690a5a35b893aeff420ee0dac2228c5c6bb2e81da5010653dc1ea87143f251af21aa078df1568760b98e1d585f8f93bcfb09b171ddae9225ccd78aa684a98795b77f164896789bb427246a1a6b09bce261f48ef3e9efd33dab44449a6bbc71d6f05dc01a359dd52442027f72b95cfe7c92db9a1572e0f1d6c6afe161013ca3676330b6021d9d7c135fe61665c4cfab0c49312a8173b58ccbec38ad842a3eddb548db49adb0ea39dabbde4be3dffed3b5be18a74940caff813defa4d09db3f7691a110b73a8e9a91635d9dd2c140ddfae1111e0d79d67768746a343c7fb4dfd55a6ed81dee916443a9eed3b3d853ad17e912cff676a90a8676ed9af39e48c49b0eff10652f881b3d905a3a5b10aacf71fe02a098b012325c051d2a77a219723003caed294fd1ba571bdc979e3c968a4de9115f1ba5a1656d2068775bd536fb0814b1adebe87c4ce62c1f3bbe64deafb026ce8ab3c87f8b36523607e93e8cb0239b4bd32ea70a17c5669e98550648f194c83583506c259870262b0ca6bddff8cc2df1756a2f9ef5ec84d1d9d0a3b994b99373dbd25736969c12f40cd88382a2cad6529add22d25dd4e9eef8d1909a7d4cc3efa6ccf418c9dfb8122439c80037245a72c2b2eec3ea2b0ed7467a3d1302b8201cd9ef8eaf9b3812601e06cb676a693ab46540fe7cf4140139ad5ec25d1c0eef6ff5a2b8d5428511da2801832ab4d44aeb7300820581207faf5abf0b74017ff7a173dda46ba177d4bb5b947339ce82e63a28bb08f70cbe0606d0401fed29f8fe43cf6e361d626aea0b0a836b5d4c0313a0499c887cd9f942fa671da617ad0f532a7f61b674a9b1fe583010c339145650dc61e64d035f8f573043b41b574276dec9cdbd8eb76f55975125ac943b53e3af68be6265d4ab940917f082afb70bc87cb908933518b152ba0d7c322b3c22e03194d85539e0f1e91e6995a3991f50c8da2f41d96c200628992e28af9d67b7dc429ff14a26d16b0dffd0194fdf87f7f042042419d0fdd14695fcfd569e074978eb3b8d0bb96660c13683c66a53b6182f0c5d5c8c8c4739b2e79c11e002b028608ca3fad0a16c72fe32f68855f1706610b5d550171d21fda4ff69fc549a4aea93211858ae6c3f0d04d5629e2ce55134bf9404479281806f81184a434004ffb27467d651adff9a511c59bdbee2d718752525d396b045930350d6edfdf5566ab2ac0e739f9ee9d1b23a1c28a340bb82ab0268f17521f87f5f549c81a7f5cd8d975631cbf30d8f490e8b222eff52332e794d050e845403cb41cbfc7063d5c99abf107a2aa4f10f720eed61f5cbe100dafc59becc48a0c4c517441f2642c4304942fc04ad5de8d373e57cc731832ee88f0c8011d5e05d7fbf4191390c86c71fc84415e1c76e43b8d6da66186fdd910022b0ececc70de442400283b5336c59fcf670fe71a72a7f5eea2c1391e07da28a7ffcec503360fee97b4c2b10673040662894c09378884edb075d0c7c45e429779cf30abffaf7e75df7671f74e37959844fba7f640955461f75a470bac5a915ad110e91e45d791a73422f72e671bf421d8becb00098e428c5c6b37300219d096957eaaa5d7241340a8b5986f577cd268a8a15914c81ac8e29053d656b7cd1c7d2f78695a9f12a291ae1b3e8863ca25abf7f218cfd4e9b1cd0edb484c6538e09ed66aa124af98c5b65a933fd35a2069f1a25214d3610a285a414447e8462da6e2b82c011b5d26aeca042c98cddecde275a4c72bbe8c03846321b535ab9298f367e1b80c0cefa5aa35c6a29947394a1f8dd3312f271c51c47c5342920ed5ae705694dcf5b1dc370869f6512c541ba800b1a325c4f7c418d87c054794c0b29a70fd85e18e6d4b792593cbc4de309799c7220b115ee364d06a15dbec89d933b5dcd1f9c7ec6ccb085d19d49288c0cccb5abc5c5819b45ef2e2a86f64052797ed7a0b283aca28560bff14ab37bb2ecfc76274443fb0bb2b610ad6317902ef98394b277bf39a99594243e0e889655bfaebce6c7957bee6c0baf29b37c0e0da6352f897324944760940ee0afe44e8b62b458e474a012b885da98763d27e34025e8f2c211c5379a3eab32ab050378e0f02c58a7ebb2d901dda8dfea25becdfbabcd4f0145d39977ba7d243c1173d74fdb1cff58c13d3c0afb63eb5a156b579b8a3f75b2c3c98cc1beca75d10cdc884847201f174eac39d3f87bac540a84e1d9f6d4e9688a16c26e156caefd4711f5a24891f0c6d82c640aae42fb5b2007226652d70aac94e19df2a5442148f160428dc10f954ac3809af06de72fe4cbb96cca6c7a7f302bc2a1d1cea6ee1795d31150c9a9cf3dd95744302b0daf8af897cff7f8d125fdc4475ebb06aaad7ea4da37051262dd28f2322eadb2eada33b3b309411b58b459f7c637504be516126be2eef47f55773d156fd4a4e044bcc4b763674ead0fbdb23c5f4a702ad71ea2f186aed8b7f30f7d4c2766741beb295bb03268d45dd1f43b9f7248830307d1fadbd99744385e27fe80675086c6558a0529d608ada36926ecbf7b5f870487cf510349589d3d90de9fd7f516c2d2615029f5515b0cab118e4a9a1ecdffa663585ca6c401bfc6c4fc33b4fcd2ab3e5db2d1089a6caedbd7c87ee258fd32f508e657b5599b95faf4cfe7dfa7d41fc7c18be68d1a812fd8a8050e9882dba8b3ee7dcf49de8ebe74fc85997278022e234c3eae7c0f1f2c8a60a9978bf23e18e7cd66dc47468ac961954346aeda2594f80d5c0b2d7d67ca40602ffcb570f8eb5e38cc778cdc3f061dd1048a2f89517d4f6a0fad18bc455863470629b0b2025a05904607782316444b23370206276b0d264b7481ba91a5a86c5ca5872c85d0fc18402937e4468828831ab8bbc10b50b48ea2219566d9d74d8957e79b1314bec12ac53639e968516b620c4dab9cd223d5619cfdfc78e6998e762052e0551f8f456e150c652d6e324b3903c979fd7310aba8865d7e0b64cfbd8d05d632174e748d285299c454efea37cbdb2099bc2e63e8a6e0530bb31ce525d570b793b16c7992ea3da298c30562c85ff7cf53aac266d414604278443ba875835e550fb034e6278ac23975b061b167be7b3771c3fffcec5bd31896d369bcdd907c41e8384cdcdad919564d6b7ffb38d9e5baf37d506166d28e2d8820e996ab809d01204cc16b20242d8195702a1d0ef23274ef80f4e23d67a52b4eaf481b1f157110fb4964d261b7d3ba295be1a6c81b4975a7b94b2383e6e283dceaed97a3714774a071f86b9c99a4c49d7855de56a2f084fcfaf7c99f15d799ed9d40b70e7b2fbe79fae7425eac704fff7327cf5181859daf17bb93ab308770cc979642801d2d3f58ec35f613a37a813957a2b8f80ba50456a967c54ae2b267b39a5d8d8d90e2c7e0050ba56860663156551baa12c6a4008f88c83f4bf44a5797ea1e121de9ee32596278c21d477cbce94c45fb7f4a7f920a0c82e014853da342001d009d3f76ea29dab132f1f5423adde07effa7d2505421900c6c949c650fd367ec9fd3e0dee4538659091555404d7766bfa81b98062683985eff8e6c52dbfda49f56976f9bda00d1cf1dc9face7172952a017cb468b7cfd57ef9da7f03dee796c3bbf7284b363b18a23681ccb35a00b919f3b57475c19439d365bb06a941dd49bdae319db92a35af0d51cf3f6bef0210b3950231a221c4a155e4789a20f1fa8128d02bae370cba24e8b7abeb59bf55032fbec59ac5e8f0644cea84b5c51fe8132ee0324fe340277b5838f01018ec512bfbc8ef99ee8e54c238e107056e62aa4ceeaa2033199465af081d9d5100af85062c694b11a3583fdc73146a9394eab84e1c03787510b1a958810008771f01f821fa54cc68600096484ea9d9d2584dedeac5a4d52889e4159e099f46d23efdc2e8dab4efcba0229f15ed3d1d8597c891a30f352b79ed15d6b87e867a50a5d88c6f66070", 0x1000, 0x6}], 0x50, &(0x7f00000027c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xe5d9}}, {@journal_dev={'journal_dev', 0x3d, 0x1fb}}, {@nodelalloc}], [{@context={'context', 0x3d, 'user_u'}}, {@uid_gt}]})
fsetxattr$security_selinux(r1, &(0x7f0000002740), &(0x7f0000002780)='system_u:object_r:pam_console_exec_t:s0\x00', 0x28, 0x2)

21:48:53 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/40)

21:48:53 executing program 4:
setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x15, 0x4, 0x5, "c9c4ac20916d09726af870d564770bbe"}, 0x15, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

[ 2054.562074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:48:53 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:48:53 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x2, &(0x7f0000000000)=""/40)

21:48:53 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f00000000c0)={0x1})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x68e146a1)
ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000000)={0x18, 0xff, 0x9, 0x8, 0x5})

21:48:53 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x3}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:48:53 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2054.664749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2054.675571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2054.769954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:48:53 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:48:53 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x20}, @device_a, @device_b, @random="604367e4ba64", {0xc, 0x3f}}, 0x374d8516, @random=0x1, 0x82c, @void, @void, @val={0x3, 0x1, 0x30}, @void, @void, @val={0x5, 0xe6, {0x0, 0x62, 0x1, "0e31ccfc2722c76dd08b94a9eaa0ca2a3dfe0c9645e459c6ba54df0b5900fd457e1ce436d569c220c743a707fff1e34212391314034fdddd42633748755cd10885da91c1a68a1090af7b605c6e6b81d46bfcafa0890ae9634ad2fbc49633e249a798d5e5d231b2527beeaffad450f61c76f005f0230e5a7da9b08dc9a2ce3714f1506d2387c6f7ebb619580b68eae48739f2d7eb142709a452ddf531c99db0ca84b9661a3c9e79ed0b3b6d0560cf167a673c1dd80e1a957f91f76dd1d0779f112ff0b12783b207670e68bcfe531c81c71dee5523735e7d88b140fe3a345fdd2096091a"}}, @val={0x25, 0x3, {0x1, 0x6c, 0x7}}, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x9, 0x4cc, 0x0, 0x263, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xcdd, 0xd1}}, @void, @void, @val={0x76, 0x6, {0x7f, 0x3, 0x1c, 0x1}}, [{0xdd, 0x8e, "17d41c60f3fb4d8e768dacacb43108ded3e150610218539569a37986a1b6cc0464e627d8f30a212c706393d3d6739cd99e23d422b2448cd6f6c55726d5031aab60158f45237364378a350806104074e8ffd4ff7cdd07165345aecbefcc5da018d01e24411e71260279239e833371375ce03ee23696077b91534c351e5dfb6412ad2bd55cd02ab2ac3c404583dd0f"}, {0xdd, 0x94, "b2197066eecf7fe1c0c935c2cbce33036711989d2c75a4f01d75f1dea0cfce9ed49fa72d70514759eee73d4c5a1260fd20490482568aa90c194682ae98981ef7020aa5e6e35296dc9e41745196937cb035e42e5768e713fc2821768fd0f89cbad3d37fe617becb652dd5dfe3edec4fe0ed0ba1239aca8361e149d5a55a5a3514246a62454cc108e3569905acb17787fbb71725cb"}, {0xdd, 0xde, "d910aa787784f8de3d77fb2a27d0e86490a7ac0930a87c21b430e57bacc2d53b515722c69256d785a810b518500cd6ae0986fa9e3af2891c80d4b9d2ad905a9141f4a99f40c37a1609d60f474f79eecfb307ec40516a8628ad4d616afd8ef331abac579d0841839d058417e983d9cf048931720e208dda878f64cc560edfdcdbba4ec62a05d8463670213f20b333ab069b5eef45687eb2febf4ffc225935d860b015ed3a5ace21304e5344bc6200df3bea0a547be28bb82f2712ff9d14544cd7ed9dab7aa4e1c7ebf7bd50b06094754a24642dd6e2a7b7f70155ea705d6c"}, {0xdd, 0x79, "6be2bae731ea3463c5933bd6094f5407d5d4fb5cc10f826bce74ea45c06fcf3c3fd05de709625fb8daf47b222bbc0ee2a6b74d4ad6aa62c68445d250e8057490aafe77ce70589d312d31b8d8609722db3c5cb2f58a6def5ac471a8149d9b4c3cb632aed043d15dfdd036bcea0025c334bb7b4a550cc8defd30"}, {0xdd, 0xd3, "71a65e3346dbc3b4ee43244c826f14af8965eaf703d22da123ede3b295c93a5ce71059399138824f9575d95c8ee0aa5d2433218a863e9387a5f1175594625e91d936242939e122b7a0da923ca186932ad4c72bace5344b36bee1cf5b23af14e715ac1b7b2f8e328be561b6e14182658be4d42d98b7d26d457215cb520956eedcd63866689a560b77b27655cca0fd18e0afb4bc435ba92f15f991e854adc9159260b25b6e4d578293f5e0078476745bcd97574b6e7eb422f37a8512959d094ce40a3eb837041d471d427364369a032bea0fb36a"}, {0xdd, 0x13, "e264bbbf398a3cce5552a2e4f9032411010d50"}, {0xdd, 0xd, "c526b6f5d6a67ea3d5bbdf6048"}]}, 0x4b2)

21:48:53 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
fcntl$dupfd(r0, 0x406, r1)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r3 = dup2(r0, r0)
ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f00000000c0)={0x5, 0x2, 0x7, 0x7, 0x7})
ioctl$KDSETMODE(r3, 0x4b3a, 0x1)
r4 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x2)
ioctl$TCFLSH(r4, 0x540b, 0x1)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x1)
ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000000)={0x80, 0x1f, 0xe1, 0xa6e5, 0x3, "b3b818e5fde925b8"})

21:48:53 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b2f, &(0x7f0000000000)=""/40)

[ 2054.964132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2054.986767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2054.988236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2055.017009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:48:54 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup2(r0, r0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x8800)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

[ 2055.039904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2055.040082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2055.074337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2055.099919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2055.101405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2055.420193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2055.424217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:06 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:49:06 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xcb)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:49:06 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:49:06 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x4}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:49:06 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:49:06 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xb8, 0x3, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xae}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x66, 0xef}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x0, 0x52}}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x6}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x80, 0x1f}}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x9}]}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6b56}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x10001}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x40844)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))

21:49:06 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f00000000c0)=@ctrl_frame=@rts={{}, {0x20}, @broadcast, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@mgmt_frame=@disassoc={@with_ht={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@device_b, {0x1}}, @ver_80211n={0x0, 0x40, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x38, @val={0x8c, 0x18, {0x11a, "0d32edb61935", @long="bf656cf01bae97904468c08f7c5ee1d8"}}}, 0x38)

21:49:06 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b30, &(0x7f0000000000)=""/40)

[ 2067.172240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.179070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.183209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.187613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:06 executing program 3:
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0x4b85, 0x8000, 0x3, 0x4400, 0x4c, "ac6f61a7ed03d98f53e17c9a249604a942e820", 0xedbf, 0x4b})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

[ 2067.210769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:06 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x80)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:49:06 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b31, &(0x7f0000000000)=""/40)

[ 2067.286176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.328932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.373712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.396359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.432666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:06 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2067.524800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:06 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000))
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:49:06 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 2067.609188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.620237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:06 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x5}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 2067.628339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.636269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.657119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:06 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b32, &(0x7f0000000000)=""/40)

[ 2067.770062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.785105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.798247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2067.813091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:06 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:49:06 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b31, &(0x7f0000000000)=""/40)

21:49:06 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2067.963085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:17 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@rts={{}, {0x7}, @broadcast, @broadcast}, 0x10)

21:49:17 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:49:17 executing program 3:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x20}, @device_a, @device_b, @random="604367e4ba64", {0xc, 0x3f}}, 0x374d8516, @random=0x1, 0x82c, @void, @void, @val={0x3, 0x1, 0x30}, @void, @void, @val={0x5, 0xe6, {0x0, 0x62, 0x1, "0e31ccfc2722c76dd08b94a9eaa0ca2a3dfe0c9645e459c6ba54df0b5900fd457e1ce436d569c220c743a707fff1e34212391314034fdddd42633748755cd10885da91c1a68a1090af7b605c6e6b81d46bfcafa0890ae9634ad2fbc49633e249a798d5e5d231b2527beeaffad450f61c76f005f0230e5a7da9b08dc9a2ce3714f1506d2387c6f7ebb619580b68eae48739f2d7eb142709a452ddf531c99db0ca84b9661a3c9e79ed0b3b6d0560cf167a673c1dd80e1a957f91f76dd1d0779f112ff0b12783b207670e68bcfe531c81c71dee5523735e7d88b140fe3a345fdd2096091a"}}, @val={0x25, 0x3, {0x1, 0x6c, 0x7}}, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x9, 0x4cc, 0x0, 0x263, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xcdd, 0xd1}}, @void, @void, @val={0x76, 0x6, {0x7f, 0x3, 0x1c, 0x1}}, [{0xdd, 0x8e, "17d41c60f3fb4d8e768dacacb43108ded3e150610218539569a37986a1b6cc0464e627d8f30a212c706393d3d6739cd99e23d422b2448cd6f6c55726d5031aab60158f45237364378a350806104074e8ffd4ff7cdd07165345aecbefcc5da018d01e24411e71260279239e833371375ce03ee23696077b91534c351e5dfb6412ad2bd55cd02ab2ac3c404583dd0f"}, {0xdd, 0x94, "b2197066eecf7fe1c0c935c2cbce33036711989d2c75a4f01d75f1dea0cfce9ed49fa72d70514759eee73d4c5a1260fd20490482568aa90c194682ae98981ef7020aa5e6e35296dc9e41745196937cb035e42e5768e713fc2821768fd0f89cbad3d37fe617becb652dd5dfe3edec4fe0ed0ba1239aca8361e149d5a55a5a3514246a62454cc108e3569905acb17787fbb71725cb"}, {0xdd, 0xde, "d910aa787784f8de3d77fb2a27d0e86490a7ac0930a87c21b430e57bacc2d53b515722c69256d785a810b518500cd6ae0986fa9e3af2891c80d4b9d2ad905a9141f4a99f40c37a1609d60f474f79eecfb307ec40516a8628ad4d616afd8ef331abac579d0841839d058417e983d9cf048931720e208dda878f64cc560edfdcdbba4ec62a05d8463670213f20b333ab069b5eef45687eb2febf4ffc225935d860b015ed3a5ace21304e5344bc6200df3bea0a547be28bb82f2712ff9d14544cd7ed9dab7aa4e1c7ebf7bd50b06094754a24642dd6e2a7b7f70155ea705d6c"}, {0xdd, 0x79, "6be2bae731ea3463c5933bd6094f5407d5d4fb5cc10f826bce74ea45c06fcf3c3fd05de709625fb8daf47b222bbc0ee2a6b74d4ad6aa62c68445d250e8057490aafe77ce70589d312d31b8d8609722db3c5cb2f58a6def5ac471a8149d9b4c3cb632aed043d15dfdd036bcea0025c334bb7b4a550cc8defd30"}, {0xdd, 0xd3, "71a65e3346dbc3b4ee43244c826f14af8965eaf703d22da123ede3b295c93a5ce71059399138824f9575d95c8ee0aa5d2433218a863e9387a5f1175594625e91d936242939e122b7a0da923ca186932ad4c72bace5344b36bee1cf5b23af14e715ac1b7b2f8e328be561b6e14182658be4d42d98b7d26d457215cb520956eedcd63866689a560b77b27655cca0fd18e0afb4bc435ba92f15f991e854adc9159260b25b6e4d578293f5e0078476745bcd97574b6e7eb422f37a8512959d094ce40a3eb837041d471d427364369a032bea0fb36a"}, {0xdd, 0x13, "e264bbbf398a3cce5552a2e4f9032411010d50"}, {0xdd, 0xd, "c526b6f5d6a67ea3d5bbdf6048"}]}, 0x4b2)

21:49:17 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:49:17 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:49:17 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x6}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:49:17 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b33, &(0x7f0000000000)=""/40)

21:49:17 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

[ 2078.208039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.220780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.228317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.232556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:17 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b34, &(0x7f0000000000)=""/40)

[ 2078.234379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.243325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.250322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.257191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.261429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.267426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:17 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080))

[ 2078.295270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.350954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.387362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:17 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b35, &(0x7f0000000000)=""/40)

21:49:17 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:49:17 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:49:17 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b36, &(0x7f0000000000)=""/40)

[ 2078.527481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.578313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.612839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:17 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x7}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:49:17 executing program 7:
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:49:17 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000000)=@ctrl_frame=@pspoll={{}, @default, @from_mac=@broadcast, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=ANY=[@ANYBLOB="189300000802110000014149110000000802110000010000080211000001"], 0x1e)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000a00)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @device_a, @device_a, @from_mac, {0x3, 0x9}}, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x19, "9b8ad8d0db834fd952e4e2835ff7f493440afdbcd8f01ef737"}, {0xdd, 0x9e, "19841f7a285f1fa2ba5f25ebc1351556b424c05e40572dbbcbaff11b76ae01a76dfa8c281963d2e91829f5aaeb48c481d7bc535961781bfeb378d0ee34db56038bda730e85df614864036da785c5dee63fe7b3b1659eec571400b98ff051e9d6445515bcdd7c3af80bcbcebd38402eccf368ff20cd08509cbbf22965affd6241d68272abd288d7ee04e1041080fc03a5c9126c5ffa3d92954dad5d05dca6"}, {0xdd, 0x1f, "b10e287672c1b1ade94d9da0e39a8bcf1cb039ba8db502065f672c95b005f4"}, {0xdd, 0xa6, "5da107240c385a74749fd20b5952fbeb4946f5c6ef2a1e5903f9bae903ca53ae15308f77d89513b66923e0d33e2f8e1f6a4b1a71f78f0a9d8c7608776166dfbe97f64a4ac3ecd4f796455de66b7754a3034c1d57648a23805a3c3aaa5889b421188dd8c5dd32484d80373680f43a45d982574a8ef246d500d190300f92d794191592144af6e272b4415f3db71608139b20478a7015e08ff9c02e4ae3b8eb88764d36e2a55713"}, {0xdd, 0xc, "8438a6a80ec089e0a1623e45"}, {0xdd, 0x1c, "8bb23a0a4f5ebeb838962c808c9286d971d38a5527b47d6fe99d1e8d"}, {0xdd, 0x1d, "0500e6738ed7e2878c09c654dafa31fa619252c04596a7e7f6f6f995f5"}]}, 0x1f7)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000300)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1}, {}, @initial, @broadcast, @broadcast, {0xd, 0x1}}, {0x4, 0x1, 0x1, 0x0, 0x8}}, {@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1}, @device_a, @from_mac=@device_b, @initial, {0x5, 0x3}}, {0x8, 0x1, 0x3}}}, @random="e0b92b9b662d247ddfdc3107d92e21cf62140950b3bb0d8708fe76aa3124607a9d0e7b1eae6919fd0f53c7856f8d44353fc97ffb58f4b478894a15baf2697d38a3fe1a4ef0bbe358ac070da579985f63bcedd62b5ced2b16e4bc4b067cccc2de078604eaad5041c28d17ccf4f5541e6f0306499be99f6e844708fcbc873ecb1986b88627d429411abfbdfe746f52b2652a0715b739eb104d0aa7827fb33669a43744d0c7330a0611fd6539265ab364a32357a1c6e37c02cfaf14617295251d6ed53d21b15675236cf76803c3d24ac03ddee74b8ec6b6bb72424fcd69e7bbda3bfc587ef3db3c786268aac4059fd90fae737bc97f1c06985d6022a78cf1434982124bc5bde6556eaa5f4eca63844dc9752436b287713a67fab4e6bc8112455f31c7b746076d8940d13e4a18400fb59e0a0f91762938f59cb018ef87f8f8e466f52beddfe08992ac6aeca07d3b39486b39339062f600c73c8c42d81d87d806d527eb9d8be2af7e0b3289bbc0ce4309851ec55bf9111c9a075bf8da050aa3b4ba8b601eb5e12b2e072e14c367dd94ceca749f724ab030f7b01eed8315de33f97c629ad0d0d80e88a41fb3ddd81983b16e948473dd39f34a7ba2ae63290360680089ab3ddab54f93967214982e59cb99e083eba6236e1b38cf79cf15cddfc3c11ffbb2980856ef5f04209919d4eed9fa0bc95efa76f6993ade704d3782e47361f6e1dac50378ea946a3e401e96da2fda07f106ba5556d614949fa905d9f6e14ec77a27afd17d333012156194eb149f8e092d72ec3d2fddeaf8e77132e8e5ffffa6060e68f787ebefd71c82e8026bf9af2a9da5f1d2b32b18f327541c31fcb6c4664bf25e2cc92424451b6974dff7b6f9d6383cf5ed3f9ebc0614300066f1f3a483232c4079a77b369817afbf607597e7e9f954df190ed6e0a691782a7d594611066d73bac13a6c144f5d25fb288f76925d394f71fb2dc63a9e88dbfee355e5458f751a895d8a8a350c09ba7b581e587fd70390f5d8c455bd18dd7a1054b69797b2673b72cdf8975c528e36ce893c3276274a02c8504241ffad0fc71c988825439f420e2ec2aa019f4cdcd5875ddc98d70519387b8be7f5ed631952a1912c004c49dd2e276baccbfa808b08adc8ab41a28ca561733d9834efa255652ffed3cf79c90685f1df196c564c6092363787be0eae1a82d7e8138d834d373f2a74f3af42313de96aafb9089ac352751f80b64a803a8b81a5e69e038c1ff90126f5f23d152b9df082fc5ac8de8d455e494076a691ae92b4a36ab29c18e6b00636b85959fedd14e734c0a3a1824a9231f665b7a1b14b3afdd5b1c201a8a09235438201954cb948d6db54aaacd26c28449ccc265e6b6354d0139a7a24919005e4bf85fbd3120a382146d604f25dec2da1e1ede984620c52d98623feef487a40124bacbc35afd8c21ad3a05ecae61f60eca0351b3993d724b5eb68b6f57d42fb40ff8abe449961b0561331da7b8b5f77b281fb5cc5e1d03483529587e59a734fa0d58c8c6d609d3e3d6aca2df7380f3b6e3a1dd8cedb432801fce778544bc69a97141baae9b4f088df864fd2a7f7c28e56d604a3ceb63437f73ec085cd9c396d574e16610511fa623a522219ce16a2818ded3a948046429d892eb2da44c1c6ff77462e40754d97bcfbab2a56a27335699809a1b108839c8206b9e7ecbc94a99faf63f31c7b08fd3d99299fd6e747c40906153a38fa6c85f63dc41af267b2e69d28ab8dbfcae18e90954abb16b1bda83fc444351de2bd0b5f183b54ace598ee65571f3a34fa8bcf7f0c9ac08f123fa5a03b3bdb234e93e8283315006798686ffb5ecff51a61c908f2ad1375f3eb0186fc77981de23d1c9cf1a52fd886989469d988073792f478480ca7514a2de33729a91e2912be0295aa9f068eac0b2da547d65707c2421b6d1d5256c3a7e918a1279c21f5f0b482eece29046a6d44bf0b11152fe70204ef1793625e63eb8c7f4d28411a20fa570391b65cd577eb5708706b07b08cc00a0e4a4dc88f69471e3191215836aeceed4f24671a94e3bfb7daefab74930dfd50f439c185ecb572ef867fe61ebe2f193d9cb6937ee37fc7a2620640c630fb07784e250975783a1fe3d1f5f744e7692134517974433300fc572e986daf767d9e8e1cbfd2f393d8dff62f302b205cbcd6dce545c6cd55bd5cc238b2d2dbe3be3c707008dbbf0488c0ac390591b3972bf65386c51ed905488e9a847c066abcfd94f1f54754be387b34cae484c10aba76f0bcf501ca2192ca4f39755e783cf5cbe6486ddb57c473a7ec76f24c0534778c23fcd5f392d33dbe7a9c665a9d689cacb3354de49f253d3545e8d01f83c4962a44c7e5c04c17b4f3ead026f29dc917a6ac68b7a1cff4c69fa5e28f17acda42ce648ee552724ec576e19c6af82bb86c5159b7a23fac46a0e3b667af9c7d014a"}, 0x6fd)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000c80)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @initial, @device_b, {0xd, 0x2}}, {0xf, 0x0, 0x0, 0x0, 0xc0}}, {@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x1f}, @device_a, @random="cb964a77f492", @from_mac=@device_b, {0x9, 0xff}}, {0xb, 0x1, 0x0, 0x1, 0x81}}}, @ver_80211n={0x0, 0x1f, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="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"}, 0x301)
syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000fc0)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x4000}, @device_b, @device_b, @device_b, {0xd, 0x1f}}, @random="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"}, 0x6a8)
syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000001bc0)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @from_mac, {0x1, 0x2b}}, @ver_80211n={0x0, 0x40, 0x2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x5, 0x59, @random=0xd963, @val={0x1, 0x0, [{0x5, 0x1}, {0x4}]}, @val={0x2d, 0x1a, {0x400, 0x3, 0x1, 0x0, {0x8, 0x1ea8, 0x0, 0x7, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x2}}, [{0xdd, 0xfffffffffffffdd2, "ac1545181e4d382937a2d7d03d744c490b2b1e0f38920d4b9abbee06bd5d96f661e292dee5e97b777f0d002ea56f9ed253a9bf076c5647af0a34f2d6774ee1a31cec4858cd055a27d4261d288c7263829feab802f4a0da57f1cdd2bfa8d7ae1ad4e991fb055ad09f504aa8ef2bec6dd542e853459558f3c889e9dc2fa45839d36b8569a64801152588d4e1544f366377de56dc323ab9"}, {0xdd, 0x92, "6e8f7e59ecdc11d99d88d30ffd2b81bbd9f7184d57bf0dcd13a55ee5afebe02c47a4196617ea00815314d38ec6839445052c931126b41f6c4da6b0e5cf3c1ff1bff8d3e842c98fb48be73e19257466c3529a87ca237b823cf5e6b88b490f871df534f59ff1206d44056f818fe59d72c391e556e91dc8bc7e0821befa9e3bb71e696a652d35b3ace724bbb5d896db6f86d01f"}, {0xdd, 0x93, "29c4aeb18e388505d88c6e3b33d0173c11e772a276fcd09e46093492f34917fc4db8b7244f4c06b2b8b95dd07e14c40f037804d4808fa164acff6935289c52ec63537192c391710223168506f48f18c6bf4e89645e87737350e1c85c06e9f153458cc5de670dd5c7cf8b5fe8466bcf36e9e7444ddfb76d857806bac053c03d7dbccbb20a8bde27428256a280e371c62d14e9ab"}, {0xdd, 0x82, "bc233dd72f3f258265864b2d313f910d6426fddf92201bf654a047c4cca8c02e08598d8bb2c1ae09dcccc4b29c2a4c554eb47933b324b38998058d9d850dba551bcc402db9425e3638674949d9d16edb21d27624a2f26b3520a7f4791615141fe9d4b3cead08b853d83e0ebf713a59a33ec7e73c94ea4f4e2c9bfef6d31ce096df75"}]}, 0x283)

21:49:17 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b37, &(0x7f0000000000)=""/40)

21:49:17 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x182, 0x60, 0x4}, 0x18)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="28000000030101020000000000000000070000040c001080210007400000008008000340000000028ac6fb1f6d8b34"], 0x28}, 0x1, 0x0, 0x0, 0x24044081}, 0x44)
syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000200)='./file0\x00', 0x92, 0x8, &(0x7f00000006c0)=[{&(0x7f0000000240)="8fe7d72db1ca6679f322adc44af83ff1f2b889bbf8874c5afb1ca7dba760c2065debd04a219bd6b2d1692e1a38f858b160ebfc6adafb0de110ef1f9983a319db3b339b2fd7869261b859109978811b872e8554cdd6e967a2da93c474de28d9582d4b98d77f3b1ce9ee3b8501fcb0df41abf2d2436b2c1a00cd1f8ebeb7326009b17c77a8418e7fcaa83e140ff0fb6622c30c08c859892644e3131166eccf8976d334c7d5480805f829ce2c98338bbc6f0416d121e6112d21ec6ea62c761b2f16aa7f37b2223abb1326953380db20311c00a45617e2b314a9d2fb9ad8a0c3097b3d62d23b53f7939edc59740990c6ec9737b85a98a04031885a1023bb2d", 0xfd, 0x4}, {&(0x7f0000000340)="1014dd934ae0a5841abf0391567b049dd987abfdcb156b89b5b490d775d94c5cd81982508e724ccd69286d2291acb3bbb7515f8ae5c7b698a578ac6ecdf29b5f2d9f01ac709e98c3d11509287b4c284dce6442eee84b0b69d3a19d18179a043c44633820bf8b233938c1f58cbceda62196fcab2a83d698", 0x77, 0x648}, {&(0x7f00000003c0)="8daa0de5c9c0d8776a242f494041a74c8ab17ce44833635f41f64cb0ea583f3d35419e51659b90c28b2f497d997afd94aee34ee8eaf64a49a4639fcd3ae37605b944c8321095b512a7498daf4b10ac434c1baace491ff38bda7f3711c8f1e10d96b8e771de05cad4d3d6798488c93eaff65dda5aeeb68eadee714c5437d104a3ac4790cfe1bdc7548a333ba6d08cc908a9c47cae0bdc1dfad88d34e2e752665e844af8625668612401c3ffb34448d4b53a326308643efe5de1da150ae2444260160c8da93d0097037ebad560c9eb84abe2b7d413ab44a78f611298", 0xdb, 0x1643}, {&(0x7f00000004c0)="5661129390d0a156fdc490be333d6667", 0x10, 0xcfa}, {&(0x7f0000000500)="6caf7c93b2f0d05f512cd845198b5ee1e96ebafc0462447c91455f63e46f192edeec6ad6f4e1ace57ac925d205b72e28a4d71c3116da7ab99ce35c951570f938b098d1896decf2fa29e50f91a07e4fa320b912e8c0cf4de872b1fb0a26f4523bc317c4e8e2580feff2fd434319904b6a34da9bfb8344f1995e49aaae4b5e1147b5ee87a88787ea19695d76632659b716d1ce33fe750e34e283a1ddbbde83ae03c3bdeb12e28cb83d2bf48ed939ff351a732d1df3fd2f09242d7c0161", 0xbc, 0x4}, {&(0x7f00000005c0)="bd7d6dcec5497811cd657ae48392", 0xe, 0x8}, {&(0x7f0000000600)="066fa008b041fc99897502b5b8305f6693f36914", 0x14, 0x1000}, {&(0x7f0000000640)="1ec50bf2e9096a1cfe2f1646e14da58933d0f3061d59ff2a48f0191bf694444a4a96480cbffacbe078b9fee296df5995c8345985bac1ab8b313e7e70cdd4b5e25db54e8393e1c0d641fc9261c597a7554f123bae28a04a3b3607f5e4db1ba821d4e56d7282023015865adc4e2d9edba99946b80ca2fa3b4cce41dced3f", 0x7d, 0x6e59}], 0x807, &(0x7f0000000780)={[{@grpjquota}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '\xd1.]@#\x94'}}]})

[ 2078.784047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.798610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.830992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.848189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.856822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.876127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.894233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.927860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.945215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.956848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.975999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2078.991648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.002744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.104209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.310234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.316799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.331860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.355044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2079.365732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:33 executing program 3:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x20}, @device_a, @device_b, @random="604367e4ba64", {0xc, 0x3f}}, 0x374d8516, @random=0x1, 0x82c, @void, @void, @val={0x3, 0x1, 0x30}, @void, @void, @val={0x5, 0xe6, {0x0, 0x62, 0x1, "0e31ccfc2722c76dd08b94a9eaa0ca2a3dfe0c9645e459c6ba54df0b5900fd457e1ce436d569c220c743a707fff1e34212391314034fdddd42633748755cd10885da91c1a68a1090af7b605c6e6b81d46bfcafa0890ae9634ad2fbc49633e249a798d5e5d231b2527beeaffad450f61c76f005f0230e5a7da9b08dc9a2ce3714f1506d2387c6f7ebb619580b68eae48739f2d7eb142709a452ddf531c99db0ca84b9661a3c9e79ed0b3b6d0560cf167a673c1dd80e1a957f91f76dd1d0779f112ff0b12783b207670e68bcfe531c81c71dee5523735e7d88b140fe3a345fdd2096091a"}}, @val={0x25, 0x3, {0x1, 0x6c, 0x7}}, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x9, 0x4cc, 0x0, 0x263, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xcdd, 0xd1}}, @void, @void, @val={0x76, 0x6, {0x7f, 0x3, 0x1c, 0x1}}, [{0xdd, 0x8e, "17d41c60f3fb4d8e768dacacb43108ded3e150610218539569a37986a1b6cc0464e627d8f30a212c706393d3d6739cd99e23d422b2448cd6f6c55726d5031aab60158f45237364378a350806104074e8ffd4ff7cdd07165345aecbefcc5da018d01e24411e71260279239e833371375ce03ee23696077b91534c351e5dfb6412ad2bd55cd02ab2ac3c404583dd0f"}, {0xdd, 0x94, "b2197066eecf7fe1c0c935c2cbce33036711989d2c75a4f01d75f1dea0cfce9ed49fa72d70514759eee73d4c5a1260fd20490482568aa90c194682ae98981ef7020aa5e6e35296dc9e41745196937cb035e42e5768e713fc2821768fd0f89cbad3d37fe617becb652dd5dfe3edec4fe0ed0ba1239aca8361e149d5a55a5a3514246a62454cc108e3569905acb17787fbb71725cb"}, {0xdd, 0xde, "d910aa787784f8de3d77fb2a27d0e86490a7ac0930a87c21b430e57bacc2d53b515722c69256d785a810b518500cd6ae0986fa9e3af2891c80d4b9d2ad905a9141f4a99f40c37a1609d60f474f79eecfb307ec40516a8628ad4d616afd8ef331abac579d0841839d058417e983d9cf048931720e208dda878f64cc560edfdcdbba4ec62a05d8463670213f20b333ab069b5eef45687eb2febf4ffc225935d860b015ed3a5ace21304e5344bc6200df3bea0a547be28bb82f2712ff9d14544cd7ed9dab7aa4e1c7ebf7bd50b06094754a24642dd6e2a7b7f70155ea705d6c"}, {0xdd, 0x79, "6be2bae731ea3463c5933bd6094f5407d5d4fb5cc10f826bce74ea45c06fcf3c3fd05de709625fb8daf47b222bbc0ee2a6b74d4ad6aa62c68445d250e8057490aafe77ce70589d312d31b8d8609722db3c5cb2f58a6def5ac471a8149d9b4c3cb632aed043d15dfdd036bcea0025c334bb7b4a550cc8defd30"}, {0xdd, 0xd3, "71a65e3346dbc3b4ee43244c826f14af8965eaf703d22da123ede3b295c93a5ce71059399138824f9575d95c8ee0aa5d2433218a863e9387a5f1175594625e91d936242939e122b7a0da923ca186932ad4c72bace5344b36bee1cf5b23af14e715ac1b7b2f8e328be561b6e14182658be4d42d98b7d26d457215cb520956eedcd63866689a560b77b27655cca0fd18e0afb4bc435ba92f15f991e854adc9159260b25b6e4d578293f5e0078476745bcd97574b6e7eb422f37a8512959d094ce40a3eb837041d471d427364369a032bea0fb36a"}, {0xdd, 0x13, "e264bbbf398a3cce5552a2e4f9032411010d50"}, {0xdd, 0xd, "c526b6f5d6a67ea3d5bbdf6048"}]}, 0x4b2)

21:49:33 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @random="c00c6fcadb9f", @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, &(0x7f0000000040)=ANY=[@ANYBLOB="1893000008024b85b374756b2cb717261aa8dbfbe7110000010802110000413f08f6b9dd9e5025fd5b527a35350caa3c01e158135ab12b6b9f0507ad6c745d5ce44e2367ca9ceea4fda1a466bb2ace857d5cd4"], 0x1e)

21:49:33 executing program 7:
syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:49:33 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:49:33 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:49:33 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b3a, &(0x7f0000000000)=""/40)

21:49:33 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x152}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc008800}, 0x8041)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r4, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="763b14527f82da1db93ea241fe46575f7ec9485665de22f0b153806f9ccf439d9392cb4a", @ANYRES16=r4, @ANYBLOB="00022bbd7000fedbdf25680000001200c70009015c010004df5f66ca4f0ec51d0000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r4, 0x304, 0x70bd2f, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4008000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r6, 0xffffffffffffffff, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r7, 0xffffffffffffffff, 0x0)
fcntl$dupfd(r6, 0x0, r7)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000))

21:49:33 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x9}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 2094.154249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2094.174416] netlink: 'syz-executor.4': attribute type 338 has an invalid length.
[ 2094.198789] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[ 2094.207677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2094.208850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2094.212835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2094.220626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2094.229410] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:33 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b3b, &(0x7f0000000000)=""/40)

[ 2094.242042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2094.253632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2094.276114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:33 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b3c, &(0x7f0000000000)=""/40)

21:49:33 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:49:33 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = getpid()
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe8fe}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x800)
r2 = pidfd_open(r1, 0x0)
process_madvise(r2, &(0x7f0000000440)=[{&(0x7f0000000000)="dd", 0x1}, {&(0x7f0000000040)='_', 0x1}], 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))
r3 = clone3(&(0x7f0000000480)={0x40000, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x20}, &(0x7f0000000240)=""/210, 0xd2, &(0x7f0000000340)=""/116, &(0x7f00000003c0)=[r1, r1, r1, r1, r1], 0x5}, 0x58)
pidfd_open(r3, 0x0)

21:49:33 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:49:33 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b3d, &(0x7f0000000000)=""/40)

[ 2094.587246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:49:33 executing program 7:
syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 2094.603775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2094.613822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2094.705819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2094.753789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2097.461319] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2097.463814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2097.466393] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2097.473332] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2097.478978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2099.548619] Bluetooth: hci2: command tx timeout
[ 2101.595708] Bluetooth: hci2: command tx timeout
[ 2103.643555] Bluetooth: hci2: command tx timeout
[ 2105.693539] Bluetooth: hci2: command tx timeout
[ 2125.779607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2125.781129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2125.831870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2125.833098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2126.276369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2126.582529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2137.435590] Bluetooth: hci3: command 0x0406 tx timeout
21:50:21 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:50:21 executing program 3:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x20}, @device_a, @device_b, @random="604367e4ba64", {0xc, 0x3f}}, 0x374d8516, @random=0x1, 0x82c, @void, @void, @val={0x3, 0x1, 0x30}, @void, @void, @val={0x5, 0xe6, {0x0, 0x62, 0x1, "0e31ccfc2722c76dd08b94a9eaa0ca2a3dfe0c9645e459c6ba54df0b5900fd457e1ce436d569c220c743a707fff1e34212391314034fdddd42633748755cd10885da91c1a68a1090af7b605c6e6b81d46bfcafa0890ae9634ad2fbc49633e249a798d5e5d231b2527beeaffad450f61c76f005f0230e5a7da9b08dc9a2ce3714f1506d2387c6f7ebb619580b68eae48739f2d7eb142709a452ddf531c99db0ca84b9661a3c9e79ed0b3b6d0560cf167a673c1dd80e1a957f91f76dd1d0779f112ff0b12783b207670e68bcfe531c81c71dee5523735e7d88b140fe3a345fdd2096091a"}}, @val={0x25, 0x3, {0x1, 0x6c, 0x7}}, @void, @void, @val={0x2d, 0x1a, {0x8000, 0x3, 0x6, 0x0, {0x9, 0x4cc, 0x0, 0x263, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xcdd, 0xd1}}, @void, @void, @val={0x76, 0x6, {0x7f, 0x3, 0x1c, 0x1}}, [{0xdd, 0x8e, "17d41c60f3fb4d8e768dacacb43108ded3e150610218539569a37986a1b6cc0464e627d8f30a212c706393d3d6739cd99e23d422b2448cd6f6c55726d5031aab60158f45237364378a350806104074e8ffd4ff7cdd07165345aecbefcc5da018d01e24411e71260279239e833371375ce03ee23696077b91534c351e5dfb6412ad2bd55cd02ab2ac3c404583dd0f"}, {0xdd, 0x94, "b2197066eecf7fe1c0c935c2cbce33036711989d2c75a4f01d75f1dea0cfce9ed49fa72d70514759eee73d4c5a1260fd20490482568aa90c194682ae98981ef7020aa5e6e35296dc9e41745196937cb035e42e5768e713fc2821768fd0f89cbad3d37fe617becb652dd5dfe3edec4fe0ed0ba1239aca8361e149d5a55a5a3514246a62454cc108e3569905acb17787fbb71725cb"}, {0xdd, 0xde, "d910aa787784f8de3d77fb2a27d0e86490a7ac0930a87c21b430e57bacc2d53b515722c69256d785a810b518500cd6ae0986fa9e3af2891c80d4b9d2ad905a9141f4a99f40c37a1609d60f474f79eecfb307ec40516a8628ad4d616afd8ef331abac579d0841839d058417e983d9cf048931720e208dda878f64cc560edfdcdbba4ec62a05d8463670213f20b333ab069b5eef45687eb2febf4ffc225935d860b015ed3a5ace21304e5344bc6200df3bea0a547be28bb82f2712ff9d14544cd7ed9dab7aa4e1c7ebf7bd50b06094754a24642dd6e2a7b7f70155ea705d6c"}, {0xdd, 0x79, "6be2bae731ea3463c5933bd6094f5407d5d4fb5cc10f826bce74ea45c06fcf3c3fd05de709625fb8daf47b222bbc0ee2a6b74d4ad6aa62c68445d250e8057490aafe77ce70589d312d31b8d8609722db3c5cb2f58a6def5ac471a8149d9b4c3cb632aed043d15dfdd036bcea0025c334bb7b4a550cc8defd30"}, {0xdd, 0xd3, "71a65e3346dbc3b4ee43244c826f14af8965eaf703d22da123ede3b295c93a5ce71059399138824f9575d95c8ee0aa5d2433218a863e9387a5f1175594625e91d936242939e122b7a0da923ca186932ad4c72bace5344b36bee1cf5b23af14e715ac1b7b2f8e328be561b6e14182658be4d42d98b7d26d457215cb520956eedcd63866689a560b77b27655cca0fd18e0afb4bc435ba92f15f991e854adc9159260b25b6e4d578293f5e0078476745bcd97574b6e7eb422f37a8512959d094ce40a3eb837041d471d427364369a032bea0fb36a"}, {0xdd, 0x13, "e264bbbf398a3cce5552a2e4f9032411010d50"}, {0xdd, 0xd, "c526b6f5d6a67ea3d5bbdf6048"}]}, 0x4b2)

21:50:21 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0), &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:50:21 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0xf}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:50:21 executing program 7:
syz_80211_inject_frame(0x0, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:50:21 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000000)=""/40)

21:50:21 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r2, 0xffffffffffffffff, 0x0)
write$bt_hci(r2, &(0x7f0000001cc0)={0x1, @le_set_event_mask={{0x2001, 0x8}, {"fee0d8ef7bbe40c0"}}}, 0xc)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r3, 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x68e146a1)
sendmmsg$inet6(r3, &(0x7f0000001c00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="014e5628d52553df34809aa893953974bf855df61781f6da82b3899764fb5d48f9e810144f14960fae2a74c62359447f7c71d0090664956296a5d7130ab35506d1cc22c9b8e26032086d99a4227b64983f0ddb7bdd6f566d16eeb34811", 0x5d}, {&(0x7f0000000140)="3b4482a340d415c2d594500b22f5ce1650c7976bd199a4f244d2f86c20ffe9d90f9af5c413ef6a066dc7024d792fa5814074e83da5f74b66d81d0c78e76206185df7adcd18eab51f2da1dba3741fc38b9485c54c9be10f3e020d7474f8f26ab78baab3e593d8bf5760215392ae5fd1a35224c8ff47e97ec82cd59d63f040362496cfb19ec8bf7de94c777505f13c1fe53efe6f211cbef5832dc8a9927d191c2dcf33333a17e2dd275df7f1a9481cb513715c0113ef0a5f16b5ad2f14353e1b0534fffca1e207bf5eff7f0c585ac8acf642175c020844dc8c77d9e1572c0f334a5d6cc895d6f00cc469a47397c01ad76bb6505f", 0xf3}], 0x2, &(0x7f0000000280)=[@hopopts={{0x28, 0x29, 0x36, {0x5e, 0x2, '\x00', [@pad1, @ra={0x5, 0x2, 0x7ff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x4, 0x4, 0x0, 0x4, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local]}}}], 0x60}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @local, 0x1f}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000340)="ed2ab17f1378bb2ea96b19794381957fe2", 0x11}, {&(0x7f0000000380)="4d01469bbd17e52837daa13340886fe6d28ece38f214e68b2797ad5f949af7c7e8433d18e8b8721b26e14644f7558018e65c96928d476467440fb1f7a4baa8f077b9c62c7c885c5898c766dc87c89208b08106d86578557df357d937f9eafda04beebf61d3a612e0a25bd6abc94e2b5b6380c19d4e441d3783bc593e1cd743389923b072382aa431cd6c42365587c4b736d737", 0x93}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="4d82feb90cb167b5a4cdf505f8a2679f9ba94307", 0x14}, {&(0x7f0000001480)="3f962339844f4d535546ab66121d2c9a1dc5962bb8cab3097fce3c27cb2e5ede3964d9f20a88a2062fb9b60ea1750ef56c1dcdfe051727f02a41e5ce0255c8f87b18685f3465bb753de10662b6cb168750ecfef4704755183a3150b594e32b0313373c4435312a51505a34ce3a386ffb3e38a7de603d0860445390bf2e638a89d6464742abaf5babdd95a08fd910eb8eef92f2fa8744d8a6af5ca196cc3c5725975c763899bc5ccc10c31822a2e5bf3b1bc66e8508b3c957d7bd44b7aa8d4a723292b57e88cce01fa3821a97dc2d68271795bc36fed200b300f36af11294fda260d3", 0xe2}], 0x5, &(0x7f0000001600)=[@dstopts_2292={{0x58, 0x29, 0x4, {0x6, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0x40}, @pad1, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0xb0, 0x0, [0x20, 0x7fffffff, 0x7, 0x8]}}, @calipso={0x7, 0x8, {0x1, 0x0, 0x6, 0x3}}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x33, 0x8, 0x1, 0x81, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, @mcast2]}}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x21, 0x10, 0x0, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast1, @mcast2]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x4, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x33}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x200}}, @rthdrdstopts={{0x88, 0x29, 0x37, {0x84, 0xd, '\x00', [@calipso={0x7, 0x28, {0x2, 0x8, 0x0, 0x0, [0x3, 0x38d, 0xff, 0xdbb6]}}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0xee}, @pad1, @hao={0xc9, 0x10, @private0}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0xfff, [0x0, 0x0, 0x5]}}]}}}], 0x210}}, {{&(0x7f0000001840)={0xa, 0x4e21, 0x80000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001880)="c6b63633ee08935e7b5cc4ff3d647fa30fe7126bb2b4b451f00984a3e8d099ccaf885c8860bfdbe56f24eae97fa0e6cd4765e9b10fc3be54", 0x38}, {&(0x7f00000018c0)="879fba1cbcda7dcd84c91025864b2d4889f8f648b316612fbdf8a14f24b5d2ab6c1c6ec10959c2b477903e300375539748c733c8e0015cce47f57f0e7b433fa816c1e9dc1b52e8e6fe730070817bbb9f5171584eb108a826cd5abec23dc083c59e08ea3fdec66e4e6f2dbc1e71fb1336136418419d07412e759b340aa2de20f4814b4e825339a74db52e6b0e9797b22648a1d186866ddb3ec40aa7e5776c6f42cb7cf7136d7ad523e8b59f5a3b05ea65f6e0430b80b2baec84614b5538a7adad1aee1f8615b3c694a231e5547b570470273343df2836", 0xd6}, {&(0x7f00000019c0)="eb90c6885b416dcd96da", 0xa}, {&(0x7f0000001a00)="3bd8bfceb476096c6028eb726138cb96a1776c8fcaf4384069c87521832336728ecacf011c62700736131f90374a5a63dda7a2e6ad944ded547938e3311d0f2f65f2ccc57373e0930b397d4cdc6ce2b03c557e4d7e0bec4ec328f4266a494b8a1b485881fab1d9fc8333fc206097becb111bcb6a2f98954a37776dcef60fd0a761c7d512f6d18eb973e825be9c360c2620328f9a1a0a81df02f59ad9ef51a6ef36cd4d50b1bcd40c13db7ba69b89e3ea4a1c59b66791b1fcb7d3c9026fae2b9903f8b850", 0xc4}, {&(0x7f0000001b00)="ecb0435ed1234d867db15b01a7e9920d2ec5bfbe0a1ac0", 0x17}], 0x5, &(0x7f0000001bc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0xee}}], 0x30}}], 0x3, 0x4080)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080))

21:50:21 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2142.676168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.687393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.695577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.715302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.725225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.731065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.752538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.757882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2142.779803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:50:21 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b44, &(0x7f0000000000)=""/40)

21:50:21 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)={0x31c, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xdb, 0x45, "a20f26ad78ebb4ef1a0b0ba04402f1cbd54e3f2c9950aa76f7263453fb8008810eed057571af94f03d13d3498de2f77123bc8bb5e7e76e9287e483447c7e683a1af4273a552c842f61334e38248a1a77a98e91b34c161d37d223063376f5f95fbb5df9dc8bd460fdacdc182756269140afca858e2b02dfcf281e51f36fc112a234c411ee5dc6f4b236dbb4905acd760a5ee51cb17232806b8b789e47aa940539b55f7a2c4dc1718151b949a562038851dc69b2258a6ce4d94ee79d14805e11c3301ba542ca6cf77c63b04f24dfe4d119512dc642615e35"}, @NL80211_ATTR_TESTDATA={0x3d, 0x45, "759d759e83f00281b9b95a6b60cbebf12372e3d1a039325a0da9c02568bb2419c559334c48817387ae56a2d36e37d22f3dfdbc08c004d84e86"}, @NL80211_ATTR_TESTDATA={0x5e, 0x45, "b02597a40356c90278f16d282adde94c07e221b2a063fbf3449d8f568f3da709e34241238f26b3936bbcbf943e6c0d2535ba19be896f88e4ece37d9989eddb5f55cac601ac11106dd564dd91ebb5ef1c0d459a56b5ca936f5410"}, @NL80211_ATTR_TESTDATA={0xb0, 0x45, "962b90dac71e47163b8915641534adcfd7bfffac2d6ac637deaf876ff3d9391ecc85140cc28d85e207dd64a2558b8e59a1557b81f0a66ac2d188c8cb4133a4beb0283eaf5c57c463c3fb9f0ad0bbac084038a5fb318f2c5de139dadd4efd5d138f14beed484b6b05e7869a7b29bc8092da23cf981a5fc86fc23f9b075924df5d9fc4c014fbf4c8e26b2b58ed2ab6e7e92351f8902218a20d401400a4842090d8d11016ed38c601c5114a6edb"}, @NL80211_ATTR_TESTDATA={0x3f, 0x45, "434169a4c5c8d6daa93e914ccceb8e6de75a98586ace913f81633e280b36e30e1aff6e18feeaceead05a7c3473b5cbae91bbcdb01c01d0a0d397a4"}, @NL80211_ATTR_TESTDATA={0x99, 0x45, "9b4fec3ea9bd80dad4b72009eb9d16c6a843bb40041fe900f1f327a82f8f8e9cb49652d32efdaa1c9d499978294d40fa19a154a41c6363dee8a341125da8e6fdbe9b5341d1f9241537c55bbf044f9ab436dfe983f596318574a75a5afae44169ee7ae2e6f065a3cbc82822ae1cca53dadabf437e8a24d5ec11b8028eb7e0061f1dd365fcde3867f126f3c7032a26df5c85f7948b15"}]}, 0x31c}}, 0x800)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xa000800}, 0xc, &(0x7f0000000780)={&(0x7f00000004c0)={0x2bc, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xe8, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0xf4a7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8b9a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3b96ee2b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff78}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3134987}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46bda9e4}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0xa6fe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2491}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x530c11db}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60838e9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa273}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4d2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x201a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4914}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x95a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa7b0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6934}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x82ae}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8720}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ea3d871}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x63a4b6ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38c91802}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d229b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x479d7823}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3a1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10d375f5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7616f3c2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc07104a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x13a6eb0c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x112b628d}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ae15729}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x14f35416}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4008c359}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1d4d329b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64c91374}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fd9dac9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x23eca744}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x301d4bc7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x12c, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x69f1d508}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xeaec7c4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x650c2e17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bc7588f}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7136d1e9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x71}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e9c7563}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66643ee9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f50cf38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76bbeec5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7479da4c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d0c9bbe}]}, {0x4}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bb1609d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x45}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb736f7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72f72e28}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)

21:50:21 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b45, &(0x7f0000000000)=""/40)

21:50:22 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:50:22 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b46, &(0x7f0000000000)=""/40)

[ 2142.991008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:50:22 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x11}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 2143.071937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2143.088612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:50:22 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b36, &(0x7f0000000000)=""/40)

21:50:22 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b47, &(0x7f0000000000)=""/40)

[ 2143.139194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:50:22 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 2143.417573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2143.464685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:50:35 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:50:35 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:50:35 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x12}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:50:35 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x11f}, @broadcast, @broadcast, @random="9acdf13cbd40", {0xc, 0x147}}, @ver_80211n={0x0, 0x6132, 0x2, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x6, 0x6, @broadcast, {0x0, 0x10, @random="fc2ad3e8fa3f092379d577935c0e66d8"}, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x2, 0x0, {0x1, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x8, 0x8, 0x80}}, [{0xdd, 0xb4, "f541bf04f8c327c343dedcab9ae0c14b9950990a2efc09239f83f9dc45c4d91da499930986ebce537cb2a6663dafb86d5a556bec97aec72742e6e1cf41b9091fff45a248a70ff138201cb6aa28d187295a0471c2537d91ed84998fda04d2fc966ec829e1170ea50cc1a3a3041119730cfffc2f7a8c0117843738b32065294184431b80ae575a1d6cf928e0420177f07683f0d0fa41961db68e2b7cddf3668aa0c77f59abc338f47cc3ba448115ed1be53aef4ee1"}, {0xdd, 0x66, "9fe64a039cdbe224bbcbbf750e952251640eff33ec0e2fd93e6e3179d527fb641d739ca76f57442d341483a52ecb4ebcea9083b8297fccbd775a9f7059c3ccb8905cc91538d04999691d433ad3ae6c3c1d7fa7722226fe7b37314d13bef4d5b4d7af0a9fe91b"}, {0xdd, 0x83, "a6500334ef080b836f24366d51b1f19135cab33be482d309430cade7a645a5724af9a590eaf301415c77f38c0c429a623359f7cdb44615f8e58c901307ed20aa9124a16067511e355340c35d60812ed15dcf8ee6a711fdcc00673248dfb2af15dbc24788f2ffcacab1e1c7e2917f9be9a17e073a84c33b0c6961f27c92c488ab0d75d5"}]}, 0x1f7)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:50:35 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b48, &(0x7f0000000000)=""/40)

21:50:35 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b33, &(0x7f0000000000)=""/40)

21:50:35 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:50:35 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = accept(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x80)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000))

[ 2156.378339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2156.378779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2156.401958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2156.406386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:50:35 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b33, &(0x7f0000000000)=""/40)

21:50:35 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xfff}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0xbab1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4081)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:50:35 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b49, &(0x7f0000000000)=""/40)

[ 2156.620120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2156.704192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2159.786698] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2159.793171] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2159.797848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2159.808346] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2159.818939] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2161.883654] Bluetooth: hci3: command tx timeout
[ 2163.932578] Bluetooth: hci3: command tx timeout
[ 2165.979705] Bluetooth: hci3: command tx timeout
[ 2168.027573] Bluetooth: hci3: command tx timeout
[ 2186.988555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2186.990146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2187.041162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2187.046263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2187.525066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2187.535024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2187.545165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2187.550060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2187.854236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2187.859945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:51:19 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:51:19 executing program 3:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r3, 0xffffffffffffffff, 0x0)
sendfile(r2, r3, 0x0, 0x1)
write$binfmt_script(r1, 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r4, 0xffffffffffffffff, 0x0)
sendfile(r4, r0, 0x0, 0x1)
ioctl$TIOCL_SCROLLCONSOLE(r1, 0x541c, &(0x7f0000000080)={0xd, 0x2})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x3)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)

21:51:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x68e146a1)
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x4, @media='ib\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0xc080}, 0x8000)

21:51:19 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:51:19 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:51:19 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x14}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:51:19 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000000300)=@mgmt_frame=@assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4}, @device_a, @broadcast, @from_mac=@broadcast, {0x7, 0x8}}, 0x1600, 0x9, {0x0, 0x14, @random="d36af1d815d176657a7fa7cd6ff8981f0a6a46af"}, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x6, 0x0, {0x6, 0x8, 0x0, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x3184, 0x8f}}, [{0xdd, 0xec, "4a6964e90c8e9568f8cacdbf39e00233d089dbac75297e3819f3b55fa97d17fd428532196ecda77d84f942185d0ed7d739e98d72f840d09554ea06db3f44f4875ffe531f35fdd6fa8b0e985fd28f36d6ec42ca3293303fa97599920fd385ab0db0976132f5b06c9995396d424412fc0a0eaca7a0ea017a54bd5ffd60282d44818de89c31ae51edd02b107e845653e12446a2ddb8b053c545b3b96276ab548faf2adf0aff5e1ed768f4e5e2f0ba6dba14cad49d1e2dbd97a57fa9862c8e74b59d0a6a0410d699d239fb8384a41fbd4c37fdd3f427127bf55f6de1e8b93313076ec47f0751df9f7a0e329d69f0"}, {0xdd, 0x94, "1b87d61d2fc31cac53d9076e9f5ea2d7d2a5cba09d5ae8ad7a9d3575ac54cd46a3dcece86c249051d075612bc03bcba48bdfdefeb01fe08522cbbd697a78625ff7d6f619b560d6c8ed47f7b8552279f2b52fdc63af20b23f2d40120667b9f00a1bd1c85c8a598189a7a06a0576ea15e93bc1c9bdb21aae94a53258641dc1462769c0705a6ba17eb9a2206916652bff66aba831c3"}, {0xdd, 0xb8, "b67e10950266728ad07615370f03e55778ec6957f6ff8c5301b5bdff60e6fcf5abea3b1b1d90dd8ad0128db7a6ef1d3bc881517e00762007030c1cfa65dbccc9ea9ad8ca98e327779880f50144a6906aa864100eb7b187c8ccbdc8a1c55217a357ffb744a320e426dc4128c0a935213c10f0ccebe985f9b3ebe9eef2c7f645949211cd59ae3c0f563bf6dd0f114f7c92a2d4864ec827b5f069e63d0b30af1b6e054d2b9e8137da89e5926d8f5d36d90fdccf4bf8f0bb4365"}, {0xdd, 0xb9, "77d28e50b6e3cff4b40c7b7a4509e29484ae595dcf85c2c12583422dc1e3548536b26818eeea82726e293f56ed49bac59c7632db98e7ae98e7b70e9ad84369eff389c93948fb3e9b6381747303d6a09435a4bce535650b69167041ab6712307469564501bb5203fa01b7c98ec22aeef88832f3173c9e2084ce2bf016889781aaeeea9b9f8ad55dbbbec044881d1211b9c49b50dd461da8fad62ac0106cf926699233f2f87d3bd3748f930e0568ec1360a55976a6dde90bb91a"}, {0xdd, 0x4c, "73d6072032bf0754f9a405d5afdba4f3b4c8b6be8c10f4b3dd3a11ba54863db1c4f44560e120e8e84fcb9d570af2e7e4012766b93132432a11ce732e1357b54be2f7aa1174e13dd6541e0f6d"}, {0xdd, 0xff, "6c8e80a0af62a695aafc0abdd663546a1e5118aeae342208410b4922f737d2d8107465bf406da3d6f969be5fe39d2e650afb782899c44d951261bab36b02613071fad01a5f09a8eaa00235423553b8a4ed66b9067cf8e5c46f2562a61e6f7d2a31b582e4f9d1f3b0c68a63f36d0078a1df78feecb7b53b4ca2abe1d078e8ebec373df258f2055a8b19592df6c7d124ec43efc8bb437d6a002094c52d3dfc3c9d4be1e20f5d7895184a706aa42b6b8e1f62071ea913c08c566b51c82426d6ab98d9458663bec621dc431c7af684d526fcacf7c1e4b12367dcbe9e7712dc5237adb44a45ea47a587b05390b3dcab0fbc7ab0b1bfef087f844ae7821185b7d134"}, {0xdd, 0x77, "231f6abaaa0379e744ebfa573be23557786e927758eb2a3d0dd81785a063c15948f5bec0839e9be3dfd071c05e87c8795aa2ca711cbf45ffb6eafd65d509eff08de6b8f7fb26a5ef3106ab5cbda5958ad215913297f9a184d12af641cf33e9f7494d8b2b514294f4e724cca2b2abec140a071aab3a0c9e"}, {0xdd, 0x55, "61973fce8f2933c3882de717e58a597ab730f685c57ba7e14b7ccf94d31497c859484698f01a905df1e7394f35869f2e44ae3ee8055e115778b4be96d49d7365a5e2351de18df5163245b4a49209714cf352c7c121"}, {0xdd, 0x60, "52a862c067187a36b44519af19be087aa84c734523db4672e907134719ae70ae7c7a97802e8e64286b3f1ec1e39cc41f9562f52a27d08dcaa07220a9afb22f445129c2fefc1ded199bd6fb2e96fd0e36fba36c0cc8654fc82c9dc25128b59fa8"}]}, 0x5c8)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=ANY=[@ANYBLOB="e0948100080211000000080211000001695d363a2e66df7c83dd8dc6e54b8c0700020045c1000005260abc"], 0x2b)

21:51:19 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b4a, &(0x7f0000000000)=""/40)

[ 2200.263053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2200.276093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2200.298783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2200.307891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:51:19 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b4b, &(0x7f0000000000)=""/40)

[ 2200.337060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2200.351266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2200.364901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:51:19 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39) (fail_nth: 1)

21:51:19 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r1, 0x894a, &(0x7f0000000040)={'netdevsim0\x00', @ifru_hwaddr=@local})

21:51:19 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:51:19 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b4c, &(0x7f0000000000)=""/40)

21:51:19 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2200.568220] FAULT_INJECTION: forcing a failure.
[ 2200.568220] name failslab, interval 1, probability 0, space 0, times 0
[ 2200.569183] CPU: 0 UID: 0 PID: 44965 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 2200.569200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2200.569207] Call Trace:
[ 2200.569212]  <TASK>
[ 2200.569218]  dump_stack_lvl+0xfa/0x120
[ 2200.569245]  should_fail_ex+0x4d7/0x5e0
[ 2200.569274]  should_failslab+0xc2/0x120
[ 2200.569292]  kmem_cache_alloc_lru_noprof+0x73/0x3c0
[ 2200.569317]  ? sock_alloc_inode+0x27/0x1d0
[ 2200.569345]  sock_alloc_inode+0x27/0x1d0
[ 2200.569359]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 2200.569373]  alloc_inode+0x67/0x250
[ 2200.569393]  sock_alloc+0x40/0x270
[ 2200.569411]  __sock_create+0xc1/0x810
[ 2200.569446]  __sys_socket+0x145/0x260
[ 2200.569466]  ? __pfx___sys_socket+0x10/0x10
[ 2200.569481]  ? ksys_write+0x1a3/0x240
[ 2200.569496]  ? __pfx_ksys_write+0x10/0x10
[ 2200.569521]  __x64_sys_socket+0x73/0xb0
[ 2200.569541]  do_syscall_64+0xbf/0x360
[ 2200.569564]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2200.569578] RIP: 0033:0x7f409dade197
[ 2200.569588] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2200.569600] RSP: 002b:00007f409b0510c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029
[ 2200.569612] RAX: ffffffffffffffda RBX: 00007f409dbeff60 RCX: 00007f409dade197
[ 2200.569620] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[ 2200.569627] RBP: 00007f409b0521d0 R08: 0000000000000000 R09: 0000000000000000
[ 2200.569634] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001
[ 2200.569641] R13: 0000000000000039 R14: 0000000020000040 R15: 0000000000022000
[ 2200.569677]  </TASK>
[ 2200.575823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2200.576029] socket: no more sockets
[ 2200.690300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2200.724558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2200.750157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2200.757159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:51:31 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:51:31 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39) (fail_nth: 2)

21:51:31 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x15}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:51:31 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:51:31 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x8}, @device_a, @broadcast, @from_mac=@device_b, {0xd, 0x5}}, @ver_80211n={0x0, 0x7774, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x120, 0x0, @random, @void, @val={0x2d, 0x1a, {0x300, 0x3, 0x1, 0x0, {0x3, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x8, 0x1f}}, [{0xdd, 0xe0, "0e4108d9325d9ee2794cf7124c94d9e809846f25a45e29fcbdce271292e2f199329093fa5e80c80146d7df22b9607bf0f5b4a14b0bfaef3516ed0b7306051b761371eec1d3a72557e2bf5a62802aaa40782b1b644a779b6da0e64e5e8ffcfda1432d4797de58f448e0e99359489bcae2992ab73291f6481006055a059daeb8bfaff9f5f6761382ab84bdf9d123f37f0384592d2eae6e47ccf763b8054ccf762dae889fba26423c79f49fbc917dc6322c470d56489aeb3b57ed0ac382fc69eaaaa6e9213abef6f252ab263a82ed08f467334e0eec45d62b47f6ac38a618409d5c"}]}, 0x120)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:51:31 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)

21:51:31 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:51:31 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b4d, &(0x7f0000000000)=""/40)

[ 2212.957455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2212.957669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2212.968269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2212.971642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2212.977114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2212.990029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2213.002883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2213.010273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2213.272900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2213.315932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2213.338055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2213.347061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2223.452014] Bluetooth: hci2: command 0x0406 tx timeout
21:51:43 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000780)=@data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xc, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {0x1}, @device_b, @from_mac=@broadcast, @device_b, {0x8, 0x6}}, {0x5, 0x1, 0x0, 0x0, 0x6}}, {@type00={{0x0, 0x2, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x3f}, @device_a, @device_b, @from_mac=@broadcast, {0x8, 0x3}}, {0x1, 0x1, 0x0, 0x1, 0x5}}}, @ver_80211n={0x0, 0x7475, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0xd8, "73c8173f0ebe17781d93c74c6aed3ce907690d2c6cb66668966d346e1d95acc8b60870ed662ed28b0bcea8a405f1b361322eac64250c1c1c60e6debe8a61c9af6c6558c1f4b868764c8884706c57ac399cd7dc40a97754582f1c0399cba5d84ad0f1250c1190e27f6165ddec58cecbb1f7ef7fd723e675ce4261723a36f76589ec47fdaf331c8dc99c71d94dd9a5124563706986d2d6f648a5f854772de949627d0065f10c1cd5245e02c5e2b4370fc199badac9d8d03f775a6c39661eb43b1898d9128d1758f3041b3796ee60451e818275efb61b8f952b"}, {@device_b, @device_b, 0xfd, "171e6f6baa7b94e59b10ade00a9d76d711e87d7a79768270cb993c9541dfdad71a4936b4100c1dab31ff457da3e76aca9f104665f6f7ddad1f876ce3e6afea17c044d872c846680b3f366f9d15cae94e032cd6b4a2e9650fcfe07aca9e5862828c0f752286d78dd561e3db432ff3c8cf57bdf25da9cae621c23b90489905e90060620c4e84a8d2cb76bf655fcb36221e10df17c70ca3984a64f34f3ce2e190882dd0f9e61642661b45c4ccc32cd15e6fdc7a25ad21ca9ff1f814052022e50ca33072cfc977f567b196d9dc504d42a60d36dce23e59f313e79d91dacef582f644e538903cef47282196d034f77da73baf94cc3cdbd2bf1c4e070bf7af95"}, {@broadcast, @device_b, 0xa8, "5374c91c612a0d099a59aed40898a8be0791a6697286374637e763f7a56a3e45368b66bf4dadb8c146743c5a1f7734d64395047ed2a253c05cfbe01cea9ff9ac02bf0ae20b1b76c38947976a26cbc1afd5f39e2d4be2b1344ca5a356d37aff60936003130bdd3e0f4baefb01da7efba35da9d094814a10b51a5e29d85a473457956525c00af4e0dab3addc605153ed9d4b13b791d43f81dd28fbcd00a540b3bda8cecf7d90ff7936"}, {@device_b, @device_b, 0x8b, "859579e0322c15c2a68c2861e02da90b8fe9d0a62991137a8b93aa608a51a9a65579faddac6ca154361029eb320c6d51dc72b30f27b2307e0025787f113b34d36f4f13b1ea872b6f1f4c080b9e7659efe272a7fa562822cf6e4f6b94d494206fe6d76f2dedb6e533a3340104514051034c3581f12085910b5a7ea30c6b96ea28da5aa14e07cf464088257d"}, {@device_a, @device_a, 0xe0, "75c13d2b70eedc6f170be9fa47c57833760b4be4172e8535fa9826aa0bef61e645683dea301a806f3212e7f35f155643192de4627cda0dd78584d6777aa48c8dd5d9f4c731586db5ee40b24a5632bd4693a3fa587bbc8b5d036d2a7c4cbd995cc6781198c60f13591f9d1475f17b3dc6b64ea86c8a724ab7358c60dff4001db36d0d12a4ef03b903a298077003a5102172dbe7a6c203d25cfa9b4ece3aa8235792a6b6db062b3014731facd08e4afe438f6fed52cad63456c9c96419c8bcf41dc45b9c200d9700c9928a6410d4cfcb47b75ebeeccca877f2c1c1666371b5f77a"}, {@broadcast, @broadcast}]}, 0x480)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:51:43 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b4e, &(0x7f0000000000)=""/40)

21:51:43 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:51:43 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x22, 0x80000, 0x1ff)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x50, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x101}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x39e}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x1000, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000200)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x44400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000900)={0x58, 0x0, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @rand_addr=0x64010101}, {0x0, 0x2, @multicast1}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc4}, 0x8000)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r2=>r1, {r0}}, './file0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r5, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="28020000", @ANYRES16=r5, @ANYBLOB="00022bbd7000fedbdf25680000001200c70009015c010004df5f66ca4f0ec51d0000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)={0x4b4, r5, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x138, 0x3, 0x0, 0x1, [{0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xfe, 0x1, "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"}}, {0x30, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x2c, 0x2, "5d2d60638f62a77baceb6e8ecd9360d44139d8dac9cd3f148b71c6334a180327d7d385d576e85d3e"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1a0, 0x3, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xa0, 0x2, "0b7c9c6d75b42425babf75784e5e056589a10ec9664b672c9eacb367dc4f11a72ce65765b59201155b60204d1ae19b2f020d1f800b3198a1f0d912c7892f621b1db70a048bb7335280f459b161834f8691cd6eab6f40a254988f14ea1183eb389e90de389373ff0ff9c0e0a75f6518d977319578afe66db8a7d9b69ada2f8cf21748ff4a9a58efb26ae7f6fdc130a8cae42f882e35c22365533c1905"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xec, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xe5, 0x1, "f9df5200730f96bdc48d7f0d6eaa272785f36ba48ea6f45dd47fd6d575131fb955681e007535d4508e2d8f28a0d49ed67c4bdea738f4df3bfe69c43fc4d4a1c0b441b94e56d5d115b6533bc7adef4237c92c2960a143329e092bdd0a652dabd97ee7f22c2c6aa0009af897f9ab6eba930197343b3b60bf3bbdbb70c9d92e14ede26ecc6d5d753f19fceb0e181036bc456196f0d8852afd243c793a61090195f44432fce76b8913df31bc4fb367eeeb1665cf5f78c3638c9d0dac8cb76b289b030fd228d7b6793012f5ec6af9d89af93246cf5b17f8748369e23a7e862b542049be"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1a0, 0x3, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x87, 0x2, "e04e36c55a084b6057838f88ccd9cbeff0038c82341b0f5a3817bf1f4fe72fa71d098a0ade2fb2352c22a0ec9d36cd6ead95aa147e37a1eaf5274f28cb8cfb36937b051187c7effaa49d65a1c24fbf2d79acf8f0267f474df3653227789c1c28514129756316196e637687f6adb9c6de75e556034429f825f85d3bd0610fad82a3c909"}}, {0x104, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xff, 0x1, "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"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x4b4}}, 0x20004050)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48820010}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r6, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x9}, @void, @val={0xc, 0x99, {0x3, 0x66}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x2000c004)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x10001, 0x5, 0x5, 0x84, 0x8})

21:51:43 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:51:43 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x16}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:51:43 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39) (fail_nth: 3)

21:51:43 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 2224.216517] FAULT_INJECTION: forcing a failure.
[ 2224.216517] name failslab, interval 1, probability 0, space 0, times 0
[ 2224.217434] CPU: 0 UID: 0 PID: 45422 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 2224.217451] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2224.217460] Call Trace:
[ 2224.217467]  <TASK>
[ 2224.217473]  dump_stack_lvl+0xfa/0x120
[ 2224.217501]  should_fail_ex+0x4d7/0x5e0
[ 2224.217534]  ? security_inode_alloc+0x3e/0x130
[ 2224.217554]  should_failslab+0xc2/0x120
[ 2224.217572]  kmem_cache_alloc_noprof+0x5f/0x3d0
[ 2224.217597]  ? lockdep_init_map_type+0x4b/0x240
[ 2224.217625]  security_inode_alloc+0x3e/0x130
[ 2224.217646]  inode_init_always_gfp+0xc94/0xff0
[ 2224.217670]  alloc_inode+0x8d/0x250
[ 2224.217690]  sock_alloc+0x40/0x270
[ 2224.217711]  __sock_create+0xc1/0x810
[ 2224.217744]  __sys_socket+0x145/0x260
[ 2224.217765]  ? __pfx___sys_socket+0x10/0x10
[ 2224.217783]  ? ksys_write+0x1a3/0x240
[ 2224.217798]  ? __pfx_ksys_write+0x10/0x10
[ 2224.217825]  __x64_sys_socket+0x73/0xb0
[ 2224.217847]  do_syscall_64+0xbf/0x360
[ 2224.217872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2224.217886] RIP: 0033:0x7f409dade197
[ 2224.217897] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2224.217910] RSP: 002b:00007f409b0510c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029
[ 2224.217923] RAX: ffffffffffffffda RBX: 00007f409dbeff60 RCX: 00007f409dade197
[ 2224.217932] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[ 2224.217940] RBP: 00007f409b0521d0 R08: 0000000000000000 R09: 0000000000000000
[ 2224.217948] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001
[ 2224.217956] R13: 0000000000000039 R14: 0000000020000040 R15: 0000000000022000
[ 2224.217994]  </TASK>
[ 2224.225482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2224.225825] socket: no more sockets
[ 2224.238064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2224.259320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2224.269864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2224.280527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2224.286157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2224.313552] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
21:51:43 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b52, &(0x7f0000000000)=""/40)

21:51:43 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2224.589734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2224.631307] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
21:51:43 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b62, &(0x7f0000000000)=""/40)

21:51:43 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:51:43 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39) (fail_nth: 4)

[ 2224.730046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:51:43 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:51:43 executing program 4:
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000040)=0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000180)=0x1)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c010401080000000000000000030000060600e540f0ff0000"], 0x1c}, 0x1, 0x0, 0x0, 0x40881}, 0x4040819)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

[ 2224.875896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2224.891739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2224.915744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:51:44 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b63, &(0x7f0000000000)=""/40)

[ 2227.706214] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2227.710685] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2227.714836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2227.723106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2227.730880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2227.827412] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2227.834593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2227.839727] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2227.847314] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2227.852893] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2229.787615] Bluetooth: hci2: command tx timeout
[ 2229.915603] Bluetooth: hci3: command tx timeout
[ 2231.836050] Bluetooth: hci2: command tx timeout
[ 2231.963523] Bluetooth: hci3: command tx timeout
[ 2233.883527] Bluetooth: hci2: command tx timeout
[ 2234.011905] Bluetooth: hci3: command tx timeout
[ 2235.931525] Bluetooth: hci2: command tx timeout
[ 2236.059561] Bluetooth: hci3: command tx timeout
[ 2241.540485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2241.541078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2241.593610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2241.594222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2242.397735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2242.407535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2242.416266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2242.725753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2242.733656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2242.741263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2251.825389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2251.827047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2251.937232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2251.939578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2252.418614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2252.724852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:52:25 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:52:25 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b64, &(0x7f0000000000)=""/40)

21:52:25 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:52:25 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:52:25 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39) (fail_nth: 5)

21:52:25 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80900}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x24ec962297cd1557}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x80000001}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x24810)

21:52:25 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x17}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:52:25 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000040)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xa)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@mgmt_frame=@deauth={@with_ht={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x5eaa}, @device_a, @device_b, @from_mac=@broadcast, {0x0, 0x40}}, @ver_80211n={0x0, 0x7ffb, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, 0x22, @val={0x8c, 0x18, {0x6c0, "36ba692b9427", @long="cc5061906e9009dcd2a8c98717caf609"}}}, 0x38)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000100)=@ctrl_frame=@rts={{}, {0x81}}, 0x10)

[ 2266.967260] FAULT_INJECTION: forcing a failure.
[ 2266.967260] name failslab, interval 1, probability 0, space 0, times 0
[ 2266.968247] CPU: 0 UID: 0 PID: 46793 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 2266.968265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2266.968273] Call Trace:
[ 2266.968279]  <TASK>
[ 2266.968285]  dump_stack_lvl+0xfa/0x120
[ 2266.968312]  should_fail_ex+0x4d7/0x5e0
[ 2266.968344]  ? sk_prot_alloc+0x157/0x280
[ 2266.968362]  should_failslab+0xc2/0x120
[ 2266.968380]  __kmalloc_noprof+0xb4/0x4b0
[ 2266.968404]  ? do_raw_spin_lock+0x123/0x260
[ 2266.968438]  sk_prot_alloc+0x157/0x280
[ 2266.968462]  sk_alloc+0x34/0xbd0
[ 2266.968480]  ? __pfx_genl_release+0x10/0x10
[ 2266.968496]  __netlink_create+0x5d/0x280
[ 2266.968515]  ? __wake_up+0x3f/0x60
[ 2266.968548]  netlink_create+0x3ad/0x620
[ 2266.968571]  ? __pfx_genl_bind+0x10/0x10
[ 2266.968584]  ? __pfx_genl_unbind+0x10/0x10
[ 2266.968606]  __sock_create+0x369/0x810
[ 2266.968640]  __sys_socket+0x145/0x260
[ 2266.968661]  ? __pfx___sys_socket+0x10/0x10
[ 2266.968679]  ? ksys_write+0x1a3/0x240
[ 2266.968695]  ? __pfx_ksys_write+0x10/0x10
[ 2266.968722]  __x64_sys_socket+0x73/0xb0
[ 2266.968744]  do_syscall_64+0xbf/0x360
[ 2266.968768]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2266.968783] RIP: 0033:0x7f409dade197
[ 2266.968794] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2266.968807] RSP: 002b:00007f409b0510c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029
[ 2266.968820] RAX: ffffffffffffffda RBX: 00007f409dbeff60 RCX: 00007f409dade197
[ 2266.968829] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[ 2266.968837] RBP: 00007f409b0521d0 R08: 0000000000000000 R09: 0000000000000000
[ 2266.968844] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001
[ 2266.968852] R13: 0000000000000039 R14: 0000000020000040 R15: 0000000000022000
[ 2266.968890]  </TASK>
[ 2266.974381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.007266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.009734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.026224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:52:26 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b65, &(0x7f0000000000)=""/40)

[ 2267.039975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.052495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.068627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.071225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.087722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.099899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.110369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.135601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:52:26 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:52:26 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'lo\x00', {0x2}, 0x1d})

21:52:26 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b66, &(0x7f0000000000)=""/40)

21:52:26 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2267.345395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:52:26 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39) (fail_nth: 6)

[ 2267.451079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:52:26 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b67, &(0x7f0000000000)=""/40)

21:52:26 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x18}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 2267.490172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.500822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:52:26 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 2267.599809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.619500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.623156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:52:26 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b68, &(0x7f0000000000)=""/40)

[ 2267.686105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.703780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.730053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2267.755238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:52:26 executing program 4:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r0, 0x0, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x68e146a1)
getsockname$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f00000000c0)=0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000))

[ 2267.771382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:52:26 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2267.917376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:52:27 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/40)

21:52:27 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2270.632177] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2270.636000] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2270.641185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2270.648386] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2270.654318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2272.731677] Bluetooth: hci3: command tx timeout
[ 2274.779621] Bluetooth: hci3: command tx timeout
[ 2276.827644] Bluetooth: hci3: command tx timeout
[ 2278.875603] Bluetooth: hci3: command tx timeout
[ 2298.691631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2298.692885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2298.797787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2298.798934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2299.421906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2299.432141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2299.441930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2299.448192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2299.453655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2299.458770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2299.763891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2299.771848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2299.780161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:53:12 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b6a, &(0x7f0000000000)=""/40)

21:53:12 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x19}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:53:12 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@bar={{}, {0x7f}, @broadcast, @broadcast, @multi={{0x0, 0x1, 0x1, 0x0, 0x8}, [{0x0, 0x0, {0x8, 0x3f}, "ba7e5b6339730260"}, {0x0, 0xf, {0x4, 0x3fe}, "9ab6d7348db5ffc4"}, {0x0, 0x1, {0x3, 0xf80}, "8dcc24a670121af2"}, {0x0, 0x2, {0x6, 0x2}, "525f4cbc8d696d6d"}, {0x0, 0xf, {0x5, 0x20}, "fa5f6f0105e87b99"}, {0x0, 0x7, {0xf, 0x20}, "9abf107fd9040021"}, {0x0, 0x9, {0x2, 0x2}, "110ee8d55845287f"}, {0x0, 0x8, {0x5, 0x1}, "7dd2942fb8ca0b70"}]}}, 0x72)

21:53:12 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:53:12 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:53:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040))
ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x6)
ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'bridge_slave_1\x00', 0x100})

21:53:12 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:53:12 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39) (fail_nth: 7)

[ 2313.054903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:53:12 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {r0}}, './file0\x00'})
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080))

[ 2313.136548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2313.156119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2313.184361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2313.207380] FAULT_INJECTION: forcing a failure.
[ 2313.207380] name failslab, interval 1, probability 0, space 0, times 0
[ 2313.210188] CPU: 0 UID: 0 PID: 47935 Comm: syz-executor.3 Not tainted 6.16.0-rc7-next-20250721 #1 PREEMPT(voluntary) 
[ 2313.210221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2313.210235] Call Trace:
[ 2313.210244]  <TASK>
[ 2313.210255]  dump_stack_lvl+0xfa/0x120
[ 2313.210302]  should_fail_ex+0x4d7/0x5e0
[ 2313.210358]  ? security_sk_alloc+0x101/0x160
[ 2313.210386]  should_failslab+0xc2/0x120
[ 2313.210418]  __kmalloc_noprof+0xb4/0x4b0
[ 2313.210461]  ? __kasan_kmalloc+0x7f/0x90
[ 2313.210495]  ? trace_kmalloc+0x1f/0xb0
[ 2313.210542]  security_sk_alloc+0x101/0x160
[ 2313.210582]  sk_prot_alloc+0x20b/0x280
[ 2313.210629]  sk_alloc+0x34/0xbd0
[ 2313.210662]  ? __pfx_genl_release+0x10/0x10
[ 2313.210689]  __netlink_create+0x5d/0x280
[ 2313.210724]  ? __wake_up+0x3f/0x60
[ 2313.210764]  netlink_create+0x3ad/0x620
[ 2313.210807]  ? __pfx_genl_bind+0x10/0x10
[ 2313.210831]  ? __pfx_genl_unbind+0x10/0x10
[ 2313.210872]  __sock_create+0x369/0x810
[ 2313.210934]  __sys_socket+0x145/0x260
[ 2313.210975]  ? __pfx___sys_socket+0x10/0x10
[ 2313.211007]  ? ksys_write+0x1a3/0x240
[ 2313.211035]  ? __pfx_ksys_write+0x10/0x10
[ 2313.211086]  __x64_sys_socket+0x73/0xb0
[ 2313.211127]  do_syscall_64+0xbf/0x360
[ 2313.211172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2313.211198] RIP: 0033:0x7f409dade197
[ 2313.211217] Code: f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2313.211241] RSP: 002b:00007f409b0510c8 EFLAGS: 00000287 ORIG_RAX: 0000000000000029
[ 2313.211264] RAX: ffffffffffffffda RBX: 00007f409dbeff60 RCX: 00007f409dade197
[ 2313.211280] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[ 2313.211295] RBP: 00007f409b0521d0 R08: 0000000000000000 R09: 0000000000000000
[ 2313.211309] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000001
[ 2313.211324] R13: 0000000000000039 R14: 0000000020000040 R15: 0000000000022000
[ 2313.211396]  </TASK>
21:53:12 executing program 4:
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
read$char_usb(r0, 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0xe, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x80)

[ 2313.292699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2313.356091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2313.361398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:53:12 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b70, &(0x7f0000000000)=""/40)

[ 2316.014900] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2316.020633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2316.023189] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2316.032197] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2316.036154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2318.108087] Bluetooth: hci3: command tx timeout
[ 2320.155548] Bluetooth: hci3: command tx timeout
[ 2322.203592] Bluetooth: hci3: command tx timeout
[ 2324.251601] Bluetooth: hci3: command tx timeout
[ 2343.278319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2343.279461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2343.364672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2343.365911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2343.806860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2343.814588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2343.829820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2343.839543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2344.148065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2344.151934] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2344.156380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2350.427606] Bluetooth: hci2: command 0x0406 tx timeout
21:53:53 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39) (fail_nth: 8)

21:53:53 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=ANY=[@ANYBLOB="a426690b74bf3e224cff080211000001"], 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x33e1}}, 0xa)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000080), &(0x7f00000000c0)=@ctrl_frame=@ba={{}, {0x80}, @device_b, @device_a, @compressed={{0x1, 0x0, 0x1, 0x0, 0x8}, {0x1, 0x6}, "e47e715c3a21c8dd"}}, 0x1c)

21:53:53 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:53:53 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:53:53 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:53:53 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b71, &(0x7f0000000000)=""/40)

21:53:53 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1a}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:53:53 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)="a8f2dd735a0bca41fc5d87276b0d6eb425169b74c76dcce3e5f72aafaeb001ecea09515974fefc29c3cb99084ae20939192a116b02ba6ef25222fb8f3ff1b6b07eed160373d43979aec17d5031a9eb91811f08f65785b3712936084b4a98a03d27870d8c46440646dbbe586a5c73eb48f9aa8f0e460ea0c3f733178e1d2ffdb0232aa722330c0c7af43c96a827288ed3f90dfd683c0f57a591aa8b3abc835f6472e96ab98daa8f34e40cf52cecfe003bae3e86d81ba219c266", 0xb9}], 0x1, 0x0)

[ 2354.470269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.483168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.490347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.498080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.504529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.510297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:53:53 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:53:53 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b72, &(0x7f0000000000)=""/40)

[ 2354.574865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.575514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.585228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.598896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:53:53 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000))

[ 2354.610219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:53:53 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4bfa, &(0x7f0000000000)=""/40)

[ 2354.627296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.631765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:53:53 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, 0x2, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x400}, @CTA_TUPLE_ORIG={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @empty}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x4000810)

21:53:53 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4bfb, &(0x7f0000000000)=""/40)

21:53:53 executing program 4:
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000)=0xea87, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))

21:53:54 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:53:54 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5409, &(0x7f0000000000)=""/40)

[ 2354.932165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.949820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.967006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.967914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2354.969414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2355.030388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2355.276393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2357.615533] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2357.619175] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2357.621753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2357.627680] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2357.633513] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2359.707597] Bluetooth: hci3: command tx timeout
[ 2361.758202] Bluetooth: hci3: command tx timeout
[ 2363.804017] Bluetooth: hci3: command tx timeout
[ 2365.851566] Bluetooth: hci3: command tx timeout
[ 2385.324165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2385.325374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2385.365262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2385.366505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2385.855817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2385.861956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2385.867311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2385.873489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2385.879031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2386.183823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2386.188713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2386.194793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2386.202943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:40 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x540b, &(0x7f0000000000)=""/40)

21:54:40 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xbc, 0x3, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_NAT_DST={0x60, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24000104}, 0x4000010)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
socket$nl_netfilter(0x10, 0x3, 0xc)

21:54:40 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:54:40 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:54:40 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{0x2}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:54:40 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:54:40 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1b}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:54:40 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000040)=@ctrl_frame=@ba={{}, {0x20}, @device_a, @broadcast, @multi={{0x1, 0x1, 0x1, 0x0, 0x6}, [{0x0, 0x7, {0x9, 0x33a}, "831a907c20a409f5"}, {0x0, 0x2, {0x5, 0x8}, "192727873c162283"}, {0x0, 0x3, {0x0, 0x2}, "a0a3c7b541f468a3"}, {0x0, 0x1, {0x1, 0x81}, "ecea004b99e4007c"}, {0x0, 0x7, {0x8, 0x2e3}, "9292422d60418e5a"}, {0x0, 0x2, {0xe}, "5771380b8b9fadb2"}], {0x0, 0xe, {0x5, 0x5}, "d77fdae57e691c6b"}}}, 0x66)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @broadcast, @broadcast, @from_mac, {0x2, 0x9}}, 0x28, @val={0x8c, 0x18, {0x38, "fa5ea502045d", @long="7d495d8c86ad7a4fca8a0967cde7d2d0"}}}, 0x34)

[ 2401.605393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2401.610184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2401.628010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2401.638324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2401.659631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2401.663353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2401.669306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:40 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x540c, &(0x7f0000000000)=""/40)

[ 2401.699756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2401.701675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2401.726040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2401.727841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2401.750825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:40 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x540d, &(0x7f0000000000)=""/40)

[ 2401.925163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:41 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:54:41 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
clock_gettime(0x0, &(0x7f0000006580)={<r2=>0x0, <r3=>0x0})
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000006d40)={&(0x7f00000039c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000006d00)={&(0x7f0000006c80)={0x44, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x6d4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c084}, 0x881)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006440)=[{{&(0x7f0000000040), 0x6e, &(0x7f00000034c0)=[{&(0x7f00000000c0)=""/147, 0x93}, {&(0x7f0000000180)=""/128, 0x80}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/26, 0x1a}, {&(0x7f0000001240)=""/23, 0x17}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/92, 0x5c}, {&(0x7f0000003300)=""/251, 0xfb}, {&(0x7f0000003400)=""/184, 0xb8}], 0xa, &(0x7f0000003580)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f0000003700)=[{&(0x7f0000003640)=""/132, 0x84}], 0x1, &(0x7f0000003740)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003780)=""/185, 0xb9}, {&(0x7f0000003840)=""/68, 0x44}, {&(0x7f00000038c0)=""/87, 0x57}, {&(0x7f0000003940)=""/60, 0x3c}], 0x4, &(0x7f00000039c0)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000003a00)=""/74, 0x4a}, {&(0x7f0000003a80)=""/4096, 0x1000}, {&(0x7f0000004a80)=""/243, 0xf3}, {&(0x7f0000004b80)=""/57, 0x39}, {&(0x7f0000004bc0)=""/77, 0x4d}, {&(0x7f0000004c40)=""/4096, 0x1000}], 0x6, &(0x7f0000005cc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000100000c5aa0000000100000001000000"], 0x30}}, {{&(0x7f0000005d00)=@abs, 0x6e, &(0x7f0000006240)=[{&(0x7f0000005d80)=""/48, 0x30}, {&(0x7f0000005dc0)=""/60, 0x3c}, {&(0x7f0000005e00)=""/167, 0xa7}, {&(0x7f0000005ec0)=""/88, 0x58}, {&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/159, 0x9f}, {&(0x7f0000006100)=""/135, 0x87}, {&(0x7f00000061c0)=""/90, 0x5a}], 0x8, &(0x7f00000062c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}], 0x5, 0x100, &(0x7f00000065c0)={r2, r3+10000000})
recvmmsg$unix(r4, &(0x7f0000006c00)=[{{0x0, 0x0, &(0x7f0000006b80)=[{&(0x7f0000006600)=""/164, 0xa4}, {&(0x7f00000066c0)=""/240, 0xf0}, {&(0x7f00000067c0)=""/184, 0xb8}, {&(0x7f0000006880)=""/246, 0xf6}, {&(0x7f0000006980)=""/168, 0xa8}, {&(0x7f0000006a40)=""/218, 0xda}, {&(0x7f0000006b40)=""/56, 0x38}], 0x7}}], 0x1, 0x0, &(0x7f0000006c40)={0x77359400})
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

[ 2401.999249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:41 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:54:41 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{0x3}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

[ 2402.078738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:41 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1c}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 2402.129267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2402.154390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:41 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 2402.173012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:41 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x540e, &(0x7f0000000000)=""/40)

[ 2402.273059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:41 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 2402.309289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2402.340242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2402.368591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2402.384381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2402.407196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2402.425414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:41 executing program 4:
r0 = msgget$private(0x0, 0x408)
r1 = msgget(0x3, 0x2)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/107}, 0x73, 0x2, 0x4000)
msgsnd(r1, &(0x7f0000000000)={0x2, "4c700cd8937a135582f1629c53e86b2681a16a2309bc07849909327515cab775083c9f2a14fa"}, 0x2e, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = msgget$private(0x0, 0x4)
msgrcv(r2, &(0x7f00000000c0)={0x0, ""/109}, 0x75, 0x0, 0x0)

[ 2402.445295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:41 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:54:41 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x540f, &(0x7f0000000000)=""/40)

21:54:41 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2402.568414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:41 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5410, &(0x7f0000000000)=""/40)

[ 2402.617471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2402.631606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:54:41 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1d}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 2402.826910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2403.136316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2405.300004] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2405.303310] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2405.309158] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2405.316525] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2405.321626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2407.388592] Bluetooth: hci3: command tx timeout
[ 2409.435674] Bluetooth: hci3: command tx timeout
[ 2411.483590] Bluetooth: hci3: command tx timeout
[ 2413.531598] Bluetooth: hci3: command tx timeout
[ 2433.260799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2433.262279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2433.426232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2433.427364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2433.991168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2433.997412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2434.302340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:55:27 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000040)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x81}, @device_a, @device_b, @initial, {0x6, 0x6}}, @ver_80211n={0x0, 0x6, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x0, 0x39, @default, @void, @void, [{0xdd, 0xc8, "06303c331668ab98d8730947ac1259629dbacc26c59cb071d576295adcce264db8368676dc3a2e0312dd8aa5743e768e4ef2c845bf784e8026fbbc5dac5ad1792d915811c9fd1cbfcf3e6bec3c2229d677424c0b47c8cbf3b3488a69611a527c69c819bc12bf36a22345b9a5e0c385c029e785d33490d1e6cb81690ba4515829829e339d322415b9828d07622f812e15e59c1ec9f844494d5dbc09f9edd1374529625723409acba5a08adc66506b14a706944fba9b2e877509c541a1a3127406a80403ab006d4046"}, {0xdd, 0x18, "61c451f29dd7e3887d30182e225c03ae532474e39b953239"}]}, 0x106)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@ctrl_frame=@ba={{}, {0x1e0}, @broadcast, @device_a, @basic={{0x1, 0x0, 0x0, 0x0, 0x7}, {0x6, 0x1f}, "05d341bd357743003e38550f6e61687a197815d12f4c2a92c855d84549c7e2be1f6c119416ea868bb19a6910db5fbcd85353d2711a3bd0b7981079457db634f198d1248a21ae4a5ccfb37f5db5fa78f4f7cefca6ed525748537895f8e56a8b0c70b01d573a3409c71ec8460a894f31b689f7e17925714c3dc10a1a368b5b06ea"}}, 0x94)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @initial, @device_a, {0x9, 0xff}}}, 0x18)
syz_80211_inject_frame(&(0x7f0000000180)=@broadcast, &(0x7f00000003c0)=@data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x9}, @initial, @device_b, @device_a, {0x9, 0x9}}, {0x7, 0x1, 0x3, 0x0, 0x5}}, {@type10={{0x0, 0x2, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x81}, @initial, @device_b, @random="e8ae795a21cb", {0x0, 0x7}}, {0x3, 0x1, 0x1, 0x1, 0x40}}}, @random="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"}, 0x520)

21:55:27 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:55:27 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'geneve0\x00', {0xfffffffb}, 0x563})
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000200)={0x0, @qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}, @generic={0x6, "94ea362a681ef10216225c46a9eb"}, @qipcrtr={0x2a, 0x3, 0x4001}, 0x401, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)='vcan0\x00', 0x4, 0xff, 0x2})

21:55:27 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:55:27 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:55:27 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5412, &(0x7f0000000000)=""/40)

21:55:27 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:55:27 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x1e}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 2448.597593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.607216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.617357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.629208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.642859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.645411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.656243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.844035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.908208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.961188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2451.818871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2451.822198] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2451.824992] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2451.833177] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2451.839376] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2453.915573] Bluetooth: hci3: command tx timeout
[ 2455.963554] Bluetooth: hci3: command tx timeout
[ 2458.011570] Bluetooth: hci3: command tx timeout
[ 2460.059553] Bluetooth: hci3: command tx timeout
[ 2479.765495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2479.767546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2479.888735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2479.890345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2480.438791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2480.449880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2480.454776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2480.459300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2480.464055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2480.768791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2480.774873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2480.780572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:11 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5413, &(0x7f0000000000)=""/40)

21:56:11 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:56:11 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0)=@device_b, &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random=0x7f, @from_mac=@broadcast, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:56:11 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:56:11 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x41}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:56:11 executing program 4:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7, 0xfffffffd}}, './file0\x00'})
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000140)=0x5, 0x4)
openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x900, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
splice(r3, &(0x7f0000002840)=0x4bb, r0, &(0x7f0000002880)=0x101, 0xffffffffffffff0f, 0x14)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg(r3, &(0x7f0000002800)={&(0x7f0000000180)=@generic={0x2c, "90ba53e589595b5c03d582cf7cf83fc1707facc67aa5a339c6b871e1346548318474771ee3445da6e41255e87f4016a3f9b3998cd15c7cda6c5f556b1476bd5cb3aba9ad0ad18f02cc2b485212e1ee4979b724d930950be5d602d94d36b11959c719a7b38fd388006b59accdf27126f70e05f2214591ca236001d0f4691d"}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000200)="f5cb26b088974e07738bfea05297a44eeb1f5f896337a4780c8ced366a067bb8013334585b5fe18d7a5c91fa79ace22ed640fa5345c5b3edd567b7824948fdbbc8c6605be17a4287a5c86af42ecb2f60193705fd9d01bef14c99fb4f21dc9a649344f900703b2a25cebdd2c50aaa876ffa73a8f0e63254c427014284f9ea319e3d27f4d9", 0x84}, {&(0x7f00000002c0)="e83a55a6b8076ca85f462da65e41cc30f967037748d18849260ecd479415b54afdcffcaedc70a4962945314a7eee486d437594f8227607b49145a9dfea548561b0106fe0f4cd45ecb5a110fbccaf228b21c20975c0de9ddeaaf2141390a4b3f98f771a0721f497e1f318ba4d586d9a981ea15e89ca8698c4036a67c33ea475a0b4ec0161dabda3c528bed7f7b9964acc187be874a488ee", 0x97}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="4d7a4104", 0x4}], 0x4, &(0x7f0000001400)=[{0x88, 0x0, 0x87b5, "e68b23968aa525eccaf34516e7a660b7a6294edea086c9ac6d24c3347a75180b7c6092e5e63aa8ab1876bcfbee2394a3cef501a5e6bf388b59d04852a4d84c6a760fd660ace46b15b4de4e126115392cb9a2b5b47050d2ad053c38ba8d613e76df4923d3bb51eda88edd9d3d806494ba29bd0b220f"}, {0x20, 0x112, 0x3519, "7518ad83fef607d263678c"}, {0x38, 0x118, 0x6, "1ef88c530d9123a4ca957b25c3539a4a138cf7a68508659a49ecace2ee45401399f970"}, {0x100, 0x102, 0x401, "2e8145f2599ccae7225f1eeaf51c1bf5fa2baac4ca394e64984cff2fe19512086c25f7139527626a383a9ed8414deddd0de31266c3791c3517316553632963b2ad2b6fe1ffb23fac061daa305c597269e736ca91399411182278663844308b71f9554e7c218315de0c0e96108768c555f6bcc299d52c0516e1b2e85314ab1d3bc33a1ab894aaf7036ba6d0bb94b99caf41f7825e3f416c5be7f87dd400dbe0b1a1f17455e58312380cc21791d9d90c5caf531be7696c36740fe918888d9b8434f2ae8beba3e5cce0edfae91d85b89985df8b8c87a350ee26450a0eb563d77b3ab35e2dc91f2a11dc0e0f92b0631320"}, {0x1010, 0x10d, 0x68d6, "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"}, {0x28, 0x6, 0xd5b, "481984d1f5e30d6a4662701d1dd7f3b22b564ca4"}, {0xe0, 0x60, 0xffffff80, "a84586d225799466f4b59bf97fd7903d0f824a0c8a671af69948aa90996a6bb1f38906aaede4419debe7f27775122d8177d476d889e2b26a4222764d9956beedca272b67697f3507fb6f8b3710c0a2cfd39c74e90dfcc2de3b5987bd25778c869ba1535524f5669cbd1d30f2d351369237d71a0d7a3838f7913f2d5428425d1230704f99d626e75199eabbaedec524b8400a18134dd3d6cde979eeaee3a41b57f38d2e93191b31a33a9dc242dd5cae493c13c42816bbd248154e16e7937ea8131029726991f2a0a7da"}, {0x108, 0x111, 0x800, "5cdfebf1ecb699768903ed960f6b2b7b9ea92e98ed4540260efaa67f22adf035455bb58a98c2815ef3e0a76ced5ceff21d9903b7c043776d566312c8d2252628f2c90acad9a1e098d9242fcd4076fd94b7cd02ab224af808d6f54e9ae4cca7506b15a083a1796dbbf44513cffc167f71a825252de887109614fb0ead32817cdea70d0ef10365fe5179403c1ef7db931389c3f5082fb363184747dcacc4709458aba6abda0235148d85fc5e799fc3199853190b97a9196c24aa1b3cdec6849d2a748ffc3d0e548ab2e5035197c0074be921c0bc1e61577b23793b2a004e235b336142263d600dc6549dcf58d2028b5dd418e7686e"}], 0x1400}, 0x20000081)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000000))

21:56:11 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x2}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:56:11 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2492.131403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:11 executing program 4:
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3f, 0x118080)
r2 = fsmount(r1, 0x1, 0x86)
sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x20008094)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000))
connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xda27}, 0x1c)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
close_range(r3, r0, 0x2)

[ 2492.218175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2492.235059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2492.248456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:11 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000000201050000000000000000000c0000051000164000000100000000010000800114000e8006000340000000000600034000030000180001800c000280050001002100000006000340000000003000018006000340000200000c00028005000100110000000c00028005000100060000000c0002800500202621000000080015400000000018001700000000040000800100000081000000028000000019a3dcd39f08184d4116b2c71abe6d6b5f25d5c9"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x8004)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xa8, 0x0, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}]}, @CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x16}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x80}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x85}}]}, @CTA_ZONE={0x6}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:56:11 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2492.320139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2492.332376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:11 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5414, &(0x7f0000000000)=""/40)

21:56:11 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:56:11 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5415, &(0x7f0000000000)=""/40)

[ 2492.440164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:11 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x60}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

[ 2492.561211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2492.582510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:11 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2492.590678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2492.613001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:11 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2492.924361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2495.289351] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2495.294599] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2495.297863] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2495.304219] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2495.308486] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2495.478129] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2495.483290] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2495.487853] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2495.499011] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2495.503996] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2497.372826] Bluetooth: hci6: command tx timeout
[ 2497.563557] Bluetooth: hci7: command tx timeout
[ 2499.419502] Bluetooth: hci6: command tx timeout
[ 2499.611870] Bluetooth: hci7: command tx timeout
[ 2501.467504] Bluetooth: hci6: command tx timeout
[ 2501.659925] Bluetooth: hci7: command tx timeout
[ 2503.515816] Bluetooth: hci6: command tx timeout
[ 2503.707574] Bluetooth: hci7: command tx timeout
[ 2508.258325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2508.258986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2508.342244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2508.343256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2508.823693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2509.130126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2515.919922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2515.921035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2515.988209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2515.989370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2516.453780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2516.466789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2516.476396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2516.481930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2516.487605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:46 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5416, &(0x7f0000000000)=""/40)

21:56:46 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:56:46 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000000)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}, @random="b99a31757e3250c1e4517564be1ad290f41ea54e65624b98d140639a05344cf07f8bfac4a41cce175d074b4529fdb584f8c43ac2282ad846361e261e32d40abbebf1fcc7a3936f677cbfd65c44a6b5ed6017a73aa9bcd8e09d43345103ee4f9e6c2806e88e4a97e3febb2e9ca91820a9e5"}, 0x8f)

21:56:46 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {0x8}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:56:46 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x3}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:56:46 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1ff}, @NFULA_CFG_MODE={0xa, 0x2, {0x7ff, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xf687}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x20000000)

21:56:46 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x0}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:56:46 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2527.611079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2527.614960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2527.615968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2527.621997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:46 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5418, &(0x7f0000000000)=""/40)

[ 2527.665821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2527.676236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2527.694361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2527.708235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2527.724850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2527.750616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:46 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x541b, &(0x7f0000000000)=""/40)

[ 2527.943851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2527.958234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:47 executing program 4:
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000))

[ 2528.028300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:47 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x541d, &(0x7f0000000000)=""/40)

[ 2528.066511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:47 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x2}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:56:47 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:56:47 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2528.100118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:47 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x3}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:56:47 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x7, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:56:47 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:56:47 executing program 2:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000080)=@broadcast, &(0x7f0000000300)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @device_b, {0x2, 0xb78}}, @random="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"}, 0x1e1)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000040)=ANY=[@ANYBLOB="ff080211000001000000000000000000", @ANYRESOCT], 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=ANY=[@ANYBLOB="f5a110010001800000a2b5216a1f3c164c9c7e6c5dca2b4fd94501"], 0x1e)

21:56:47 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x541e, &(0x7f0000000000)=""/40)

[ 2528.276720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.313168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.353781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.380940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.401398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.422652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.425404] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.442892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:47 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x541e, &(0x7f0000000000)=""/40)

[ 2528.480319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.501957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.513057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:56:47 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:56:47 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x11001282}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="e40000000201030000000000000000000a000005080015400000000208000c40000000022c00028006ffffff7f0400000c00028005000100060000000c000280050001003a0000000600034000040000024800068014000500fc00000000000000000000000000000014000500ff0100000000000000000000000000000214000400fe8000000000000000000000000000aa086e584000000c042c00170000000007000003ff00000006800000010000000200009dd70000001f00000007000000060000000000000200"/213], 0xe4}, 0x1, 0x0, 0x0, 0x4010}, 0x801)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
r1 = signalfd4(r0, &(0x7f0000000040)={[0x7fff]}, 0x8, 0x800)
sendmsg$802154_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)="823171a97895feaea9e9d7a7ee28ffb7fa5f87369a8cc4a11746a7fd672905e4246630e153e8876ecf69d3ef1ffb09baa3bdc2c425fe1d38a49d268a06209347d20ceeebf672aa0781f8e3e3a53b3fd45fb2ce1f64815f43b3db87733421ce21a584874a1ae808464431c58a797c99a6572b64bb0aa900443060f83e9659ef9c22a9dd4dce93dd44f60dc282406ba2c8b860e3359aae282a68876c", 0x9b}, 0x1, 0x0, 0x0, 0x1}, 0x4044984)
pipe(&(0x7f0000000800)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000030101010000000000000000050000071000164000007fff0000ff0800034000001004140016400000000800000002000003f8000000020000000000"], 0x40}, 0x1, 0x0, 0x0, 0x80400c0}, 0x8000)

21:56:47 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2528.595322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.631943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.829829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2528.834736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2531.382519] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2531.387836] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2531.393236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2531.400185] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2531.405281] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2533.467625] Bluetooth: hci6: command tx timeout
[ 2535.515568] Bluetooth: hci6: command tx timeout
[ 2537.563598] Bluetooth: hci6: command tx timeout
[ 2539.611798] Bluetooth: hci6: command tx timeout
[ 2558.225849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2558.227009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2558.270124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2558.271240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2558.795181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2558.805018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2558.812017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2558.819587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2558.825004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:57:31 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x5}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:57:31 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x3}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:57:31 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0x0, 0x1f}}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:57:31 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:57:31 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000300)=@mgmt_frame=@reassoc_resp={@with_ht={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @random="40a82f0c0159", {0x0, 0x5}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}}, 0x0, 0x44, @default, @val={0x1, 0x3, [{0x18}, {0x79}, {0x2, 0x1}]}, @void, [{0xdd, 0x1b, "e07fcae95687103c6f9ea31663bc584695c9a290b85ca59bde403c"}, {0xdd, 0xf, "396bb9a0a53df33544d7a0c9e30d3c"}, {0xdd, 0xd1, "7215705aeb027f2da75215381072d7ab617b4f0f7a638dc3ee9f6390c4d74264ffb1946e7bd7ef9b85818d677d5ef19ddd2b538a8a21302487f13d46f2329ece0f70b693f0a0f57cc3a35cc168fcca849a2796bd62b1646b09187266d92cb1f1ba6b1cdfd815a3d76173f7a7a41ec7d323077ffcdc378202150a3476c51f4af5c1527b6675d1ec91805be8cc248b490df5be1caedfc8bd917596ed04be87a07ce4509d2130aa4d17d50067e249e18dee2397b373dcf960eb412088c6a99909eb653d2c6fe2e7850bd000337608ae83247e"}, {0xdd, 0x87, "2feab3d51a7173d21bf11c898827c805396ce83c18cb2b2de92e1a8316b17563c655f4e9c9143ac4aeeafdaaf7c0ee447711bb4d895f4379dd6252e1b2f859d6f547127edbee8b9186a32db49f0f4660bd11c67bc92d357f82104aead25f1107127538d08160a3ba801ef4951a45be1d993ff69e16136eba124aefb03c6906df605f81991070c5"}]}, 0x1b1)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=ANY=[@ANYBLOB="189300000803110000010802110000000802110000010000080211000001"], 0x1e)

21:57:31 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:57:31 executing program 4:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000))

21:57:31 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5421, &(0x7f0000000000)=""/40)

[ 2572.658933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2572.671868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2572.674719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2572.687307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2572.697160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2572.712126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:57:31 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5422, &(0x7f0000000000)=""/40)

[ 2572.744256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:57:32 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5423, &(0x7f0000000000)=""/40)

21:57:32 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:57:32 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))

[ 2573.007001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2573.015095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2573.024063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2573.054756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:57:32 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x5}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:57:32 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:57:32 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x7}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

[ 2573.245329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2573.346321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2573.563345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2573.665907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2575.707843] Bluetooth: hci3: command 0x0406 tx timeout
[ 2575.784045] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2575.790203] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2575.795410] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2575.805583] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2575.811061] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2577.883607] Bluetooth: hci6: command tx timeout
[ 2579.931514] Bluetooth: hci6: command tx timeout
[ 2581.979515] Bluetooth: hci6: command tx timeout
[ 2584.027518] Bluetooth: hci6: command tx timeout
[ 2604.372532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2604.374530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2604.469399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2604.470913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2604.975277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2604.980126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2604.983907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2604.988725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2604.997012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:58:15 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x9, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:58:15 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYBLOB="02d55e21af042339812065f84aabf53478f353962062801e765365", @ANYRESOCT], 0x36)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000040)=@ctrl_frame=@ack={{}, {0x7f01}, @broadcast}, 0xa)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:58:15 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:58:15 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:58:15 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5424, &(0x7f0000000000)=""/40)

21:58:15 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040))

21:58:15 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:58:15 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x6}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:58:15 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5425, &(0x7f0000000000)=""/40)

21:58:15 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2616.704993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2616.726301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2616.736293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2616.750677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:58:15 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5427, &(0x7f0000000000)=""/40)

[ 2616.761876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2616.789955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2616.795137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2616.800802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2616.857059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2616.898719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2616.925116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2617.114062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2617.117962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2617.229802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2617.233337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2620.763582] Bluetooth: hci7: command 0x0406 tx timeout
21:58:25 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:58:25 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2329202e2f66696c65300a48ca3d7da9009ee97c29802cc1f2024d29923ca8a768d91a18ef864b38b724d3387520db30cbc2be92f35e0a3416c407556c965617e94aab3875398fe6971819725207b1b551d446606c67617a406c0baa46d813dad7eb31eec3bb84b749cf99f841cafc333e451ab3423762bfe7b1329337ef4ca3e598c06b7cedc73a8a68acbba6aa2fb08740076201bdb5b77679063df5e28442998a7f4fa1ef0e9fb3c77a355c3e42a96da5"], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4}, 0xc)

21:58:25 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5428, &(0x7f0000000000)=""/40)

21:58:25 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:58:25 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:58:25 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:58:25 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:58:25 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000300)=@mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1f}, @broadcast, @broadcast, @random="04e691aa1236", {0x6, 0x40}}, @ver_80211n={0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0x8, 0x28, @default, @void, @val={0x2d, 0x1a, {0x20, 0x1, 0x3, 0x0, {0x80000001, 0x8, 0x0, 0x2dc, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x9}}, [{0xdd, 0xfe, "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"}, {0xdd, 0x15, "81ff6524de73863aad05c4e1b265561216af5e12ed"}]}, 0x155)
syz_80211_inject_frame(&(0x7f0000000000)=@broadcast, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x51f)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:58:25 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2626.474193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2626.545576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2626.573515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2626.581524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2626.599009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2626.616090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2626.627468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2626.632371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2626.682731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:58:25 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5429, &(0x7f0000000000)=""/40)

[ 2626.715671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2626.759053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:58:25 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2626.798952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2626.806887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:58:26 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:58:26 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 2627.113173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2627.129933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2627.200975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2627.215185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2627.217607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2627.235912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2627.241643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2627.257158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2627.300469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2627.533017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2629.959722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2629.966363] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2629.966399] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2629.970182] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2629.970612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2629.974154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2629.987408] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2629.993105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2630.005794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2630.010928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2632.028177] Bluetooth: hci2: command tx timeout
[ 2632.091659] Bluetooth: hci3: command tx timeout
[ 2634.077501] Bluetooth: hci2: command tx timeout
[ 2634.139568] Bluetooth: hci3: command tx timeout
[ 2636.124757] Bluetooth: hci2: command tx timeout
[ 2636.187632] Bluetooth: hci3: command tx timeout
[ 2638.172044] Bluetooth: hci2: command tx timeout
[ 2638.235594] Bluetooth: hci3: command tx timeout
[ 2646.385212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2646.385878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2646.507349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2646.508273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2646.791338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2647.095165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.093949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2657.095052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2657.166214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2657.167307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2657.548745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.559475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.568982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.583251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.587283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.894893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.903192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.910361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:10 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:59:10 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5437, &(0x7f0000000000)=""/40)

21:59:10 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x2}, @device_b, @device_b, @from_mac=@device_b, {0x4, 0x5}}, 0x40, @default, 0x1001, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x6, 0x2}, @void, @val={0x72, 0x6}, @void, [{0xdd, 0xc3, "00eb3774047cf8a6cb629890a2e27835f9de8764640cb9a3ec4895934b2b759bd1bb2ab47b361f536794b662c5f8ecc461aaa2146662613bc9784a717e5c2f0fa64997286682fffec0e38b2b0e54960064fd32537c5265d7d28c2d09d355917d11a2da7052cbd3dd88199036e49f5da8ed1e710c9c603d949d83d66fbdc09598d6b08176a92fe6aa0bea00feac6cae0b6424cbc8500c9323d26f925eae4d89ef3fcc3f8b0d2765bc18c905b02627bd839a8645ed4653a148b7bcbc99c59e4506f07432"}, {0xdd, 0xb0, "62f2b8f58993934c693f15f49114508f4e68d05559d7cd92425cc972619f0cb6b15c1421df1e19bc0e2e49d57a229692bccbb2e0c2d7b0c3bb606b1fdb7b6be5aab34bd4709c031fca08c541298c495ea285c861c450cd8e05e11be65c4a123fa34a4d936a41b57cbc624824a9a13b05f5371acb6b22164b2c639772a2962fd4ba9a41108c67ce2adc01e5df1673d1f5f33debe831076624a98c0ba2b49246bb90035b43bc72398ce4f5c1406677e44c"}, {0xdd, 0xd8, "af94ae9c678fde30478d7e76596a7fdccff67eca92990daf9473ce6ffa116ee3478d34d0bf1efacbb57e650ec4db3abf3130b0f0fc045823f04c37f883392d939125a00ce3b6015ad39804c90c02aae642338711dcaddef63a92f6497fa97efe0f752813d5659e130f1ffb03e9104ecdf433cc5e07404821aa24c7f51ecc61bb270ecc4c57d57d5b56c4bf17541731ae3d5631e3d2689565b3e098c0c586b634abd80be28db861ac408c944fab94232647291ebd0e8c56670bc4170db1df3ff647ce8b71aa4ebedb1282929ac9c79005b69ecfb1d692aa3d"}]}, 0x28b)
syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f00000005c0)=@data_frame={@no_qos=@type01={{0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @from_mac=@device_b, @device_a, {0x3, 0x40}}, @a_msdu=[{@broadcast, @device_b, 0xa2, "3f5646bdda516ef9d2516e739c8867bf83f8fe09fbb8749baec6ed3a0305827a16fbfe609e03cc61c24724c8093f698ba420cbdf356407a1a02dbdb1f047a675838f77b13c263029b568ff0e2295c1e1cac2dfd86f08970ce3be6053e21ae7f78014603632ee5adbe52ac0d835f409db7004a0430b13b89cceed6ad61bcf28d8590a98a853d623b83fabbd3e6b574bcdcd563e54dc239e1365797f1ff6b1006b55c9"}, {@broadcast, @device_b, 0xbe, "0ef360d665e74880d898945634182456947971c88d4e926d36feca181494c064d2012effb04219b8ba531e17aa9d79914f652065d44763efc07689c6dd1958434aad0fb6328c845a1270d95a8d2fe7a23bba21d3cf28a5d4ecc4632b698cc79b72d543848e0f9fb7fb871f6cba8ed044ace5ba8375d9c032f3cb25ac904fb74877f6f1835f748fe9773b56627645ebf2a05872dcd36471cf47bbecad4a568ece867e6f243b7b83e0b4251802462036379e0dfcf633dfe1b4bcac804144e6"}, {@device_b, @device_b, 0xcc, "14ee1044df1e401a7060982fb528886e775060e418ab0b35439ca50d171563831121f1e7f87c07cf939c8ef2d280a2b64e21e65240bde9e1dd753958c634ede15aad4c7dfdf1488c00ed90a0ef9a20c91b6fa3b13f1efd33ee58154b6d3c8842b6c7f97121fb029bb1abb1d459461b06ac060a92d0d11a6694aaabf9480db575ac49839255f04627824eddeacb378240f4de42a436d318ed825bec28f9ae334070bfa381fe387e2a5c8c0624ab7df500e9827e7cc12d94e8a57387a9586c034d6934585fb81bd65e5d2dc52f"}, {}, {@broadcast, @broadcast, 0xb8, "9f28274a4423488b48080584367aed9dc0d08e48a12a2f23017ea4b09a167525200a6cd5dc988f3009f07b6f92bc46a137b4aa893dfc5bd09198b94ef216c659353b19d1ff9bfb17ead0933f599f4ea34f2b0123d20914b9b59040c212398e6dff964644d8b522fc350bb55d447c142187acc0b5e541f0d317ab41ae8f6665f5725dec37207efbca7f4a89f3a497bb1a8e02d432632904090b76ad8ce3c89afa540c3359fe88f81185c7c4eb7162de9e9f70a5e987ce975c"}, {@broadcast, @broadcast, 0x34, "93c1450ff02d1eaba9d92be3165ac68a240e6bad43b674117f8d28a508fe0e36ee353649437020c6887d7e240099c598357b81b3"}]}, 0x38c)
syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000980)=@mgmt_frame=@probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @from_mac=@broadcast, {0x5, 0x1}}, @ver_80211n={0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x6f, "d84b7a61d89a3725b57b3e961a429217998d640fedc1093201e83c2630d0cd07ee049c1a25c19f2b9a52f26f85a50fe2be8466d6a78339f69ae9d7bd42c650d29f793f7b3f678d1c979f73db45a2c9e8a9c24cd1099ac8d4e8aa3db21fc87f7ce6de414d02843dccdb41493d26dc4d"}, {0xdd, 0xa9, "cd0d45c9a24653b90c05a822425a055902e14e07d0df6d016f2f31f0d0e7f4f4457a0ca3842a2a0a2c95694fe2155eaa48590ef01d7e6c35d0d1ac95a013ad03251156f5dab8b3bcbe8be37124abd470dc74dbfac4b6297e56ac13cd04beb1021c80e6bca2e2c780af8167625953b3ffd0bc19e0897ef9cc51006fc598ca8b276a280c0996af4ca716e63a9f66bcd6e2b35f76d7a474e1e2e091693066ee847976a984da18dcd64f91"}]}, 0x140)

21:59:10 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0xc}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:59:10 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:59:10 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:59:10 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000040)={0xf25, 0xfc, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000016cc0)={&(0x7f0000016c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000016c80)={&(0x7f0000016c40)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfd}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000850}, 0x81)

21:59:10 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2671.136660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.160788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.177594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.187883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.212571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.216371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.230703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.237346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.257737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.264260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:10 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5441, &(0x7f0000000000)=""/40)

[ 2671.324626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.354115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.374562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:10 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:59:10 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5450, &(0x7f0000000000)=""/40)

[ 2671.536483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.548371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.573127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:10 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:59:10 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001240)={0x1c, r3, 0x5, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r3, 0x200, 0x70bd3b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "df5f66ca4f0ec51d"}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x850)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x19b7c9a6, 0x62}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a04427cfbf4f29d}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x850)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:59:10 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x1b}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:59:10 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

[ 2671.696836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.759482] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
21:59:10 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5451, &(0x7f0000000000)=""/40)

21:59:10 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 2671.872186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.878593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2671.954763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2672.033799] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
21:59:11 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5452, &(0x7f0000000000)=""/40)

[ 2672.124703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2672.196792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2672.197719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2674.740257] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2674.746075] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2674.749000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2674.755969] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2674.762507] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2674.823147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2674.828702] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2674.831043] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2674.843045] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2674.847035] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2676.827824] Bluetooth: hci2: command tx timeout
[ 2676.891509] Bluetooth: hci6: command tx timeout
[ 2678.877521] Bluetooth: hci2: command tx timeout
[ 2678.939483] Bluetooth: hci6: command tx timeout
[ 2680.923894] Bluetooth: hci2: command tx timeout
[ 2680.987501] Bluetooth: hci6: command tx timeout
[ 2682.971684] Bluetooth: hci2: command tx timeout
[ 2683.035885] Bluetooth: hci6: command tx timeout
[ 2686.597933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2686.598581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2686.638065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2686.639021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2687.073099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2687.078343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2687.083283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2687.089893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2687.094693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2697.812517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2697.816391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2697.950693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2697.951859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2698.460370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2698.469213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2698.477143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2698.484789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2698.490022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2698.495341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2698.800796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2698.806465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2698.811301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2698.819240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:50 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x1d}, &(0x7f0000000100)=ANY=[@ANYBLOB="5000000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:59:50 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:59:50 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:59:50 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

21:59:50 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x545d, &(0x7f0000000000)=""/40)

21:59:50 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:59:50 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB='#) ./file0\nH'], 0xd)
sendfile(r1, r2, 0x0, 0x68e146a1)
fcntl$setstatus(r1, 0x4, 0x44000)
sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4900280}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000008010300000000000000000500000605000100000000000800034000000000060001007b5e0000080002400000000508000240000000040800034000000000080002040500010000000000080082400000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x30000851)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))

21:59:50 executing program 2:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_b, @from_mac=@broadcast, {0x6, 0x6}}, {0x9, 0x1, 0x3, 0x0, 0x6}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @initial, {0x5, 0x5}, @device_b}, {0x6, 0x1, 0x2, 0x1, 0x6}}}, @ver_80211n={0x0, 0x3, 0x3, 0x0, 0x0, 0x3}}, @random="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"}, 0x673)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

[ 2711.195652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:50 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x5460, &(0x7f0000000000)=""/40)

[ 2711.274995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2711.307099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2711.319525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2711.372461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2711.375920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2711.409521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:50 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x40049409, &(0x7f0000000000)=""/40)

[ 2711.436303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2711.449369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2711.497763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2711.507211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:50 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

[ 2711.603247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2711.687650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:50 executing program 5:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000008111108021100000000000000edffffffffff63000000000602020202020201000406000000000000b3e3428f694834366536f5"], 0x36)

21:59:50 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:59:50 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x40086602, &(0x7f0000000000)=""/40)

21:59:50 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:59:50 executing program 7:
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000100)=ANY=[], 0x36)
syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000300)=@mgmt_frame=@auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1}, {}, @device_b}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1, 0x3, 0x9, @val={0x10, 0x1, 0x6e}, [{0xdd, 0x1d, "f35b1b9a3ab7af7fa611663630057de1e76ad3af933d1f4d60dfb2c9e2"}, {0xdd, 0xc5, "716bad65522468bfe7d1d807e8fa7434a1714fc0f77d948edf752eb7ed43aa605c78d63ec27d1760a12106dac94004934e164ef90f920bbce88485a46191bae4094f2f43ba5424f9b6fa4fd279d4deec317c46148ef0b6453afeb5473795e1c874a78c8ae35a9dc59289dc4e4cf45a936670b4fd348796060bee0a268fd1f67e051ab253de22ff09d3dc57773e9d64b21d170bd1b20dec8515567a5693bad8720222d6ad0a2d0b87be9105099b6cf322640476f3a4f99fd794b75d5b23693d3e0c475822b0"}, {0xdd, 0xc4, "0602280a563198eae603dff8a9ab0b45c71f666ffdedba4fc84d57166cea48fa2a51870967c4413e88c6cb730a33ca8ea09dfd6dffb4d9026704797a94fecd2449879dc8a3f4795e18d48f863d64a96e85160fbda5b570c94adfc8542ff69333f13caeacb086c79acbb046d1cac1e0ccb6bd37c473b88bd99616e31c7ca7840fa6873d9152d163d8f867063ce1193e4a8565029d9f451a1186290051f81b8069e78a15f49ee67e01fc8eb5d5f1fd77f0c46c79f21beb69ca68acdc864d684a39b68c0d1c"}, {0xdd, 0x64, "d3ab079152b082ea393150f4f984508367d72c88dc8b098a965da3c82485e0bbe53d86762c2866fa68be2976edc1c51b4ad66bca3c42a4121fd07145d78649fcc098339e803ea5f9af5e6fe1d46daa562d42fb04698eeffb12cea12e4964ec58800fc445"}, {0xdd, 0x75, "6702ca2a5d650c7ba3e8e4eb45114c343570c53d25c19823e2959b1ec866ee83e1a73974cd59e33569e2d9653d4ebcf62251af126f93abc226c061d28c4808b0d3d89b9024f02afcd7bbf5e74a8088794087de1df468caf09a724369c576599cf5e4ee585120474a7bd544a5cd59604ad8261b5d6c"}, {0xdd, 0xd8, "7abc83d6e9f8cf8caa60df154102374847da79d3cd7852085d1912ca4742331f7fb8e1b7a6ec18592432be3c316fae2b776a23da4b4ca6d57ba13480226dce623cb4e31e4117cd424fc59513eaffb966a9308cc9105987c62b8df19a78c3e11b5982ba8a68ffc3d8aa1e0edb97d5a87cc801da4a867ca23dafcd8cb5e71f71d15d73454eccb7767a75116948f8c1033d5e5ba2e571503defbe2594cf33f9d1009d08ec5bdfea0beb0cca282299482bd562efddf4417971d8bee7a9627f248b7b1f50e6b95ee7f9c83ce97015816d806512ef0eb8e9f83251"}, {0xdd, 0x13, "239a8bb56c3a5f81c05b54b45207e024db8af3"}, {0xdd, 0x5b, "0277bde45a7527c13f6c8c21f414c0a893a9d32c0abd0ab95e3c2a1a12a008dec49b4b2a19ee63bf9c9c8dc1f288ffe2138abfa4973a33d514d64a8fbafbbef915cec4d323939d68cbbafccd834012036fd12a162c65e41f000636"}, {0xdd, 0x37, "e874c3dde47039334eab374faa0788e63767a5be429e0156ffb7effa6a8c93af4be6c22f9711b6670e1261aa1bf70868095073086c9c37"}, {0xdd, 0x85, "e01d80af6b6ff53834a0ce2b57c00111d3b5316c7da2bf229be1181299b638577c4f0abcf4beed4b7473b797218f1d0add3b6dfa1f922795fa227b747f1f6b871c578b37edcfe1a8624bea22ecd7f5da0b8b9e5fe659d9e621b353c8cc30995475288788a70658541f4bc7d1a788eac3cc1e499d2317ff398e203f24d2de57cefbb43ae504"}]}, 0x4ba)
syz_80211_inject_frame(&(0x7f0000000040), &(0x7f0000000080)=@ctrl_frame=@rts={{}, {0x158e}, @device_b, @device_b}, 0x10)
syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000200)=@ctrl_frame=@pspoll={{}, @random, @from_mac=@broadcast, @device_b}, 0x74)
syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f0000000c40)=@data_frame={@no_qos=@type11={{0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @device_b, {}, @device_b}}, 0x1e)

21:59:51 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x40087602, &(0x7f0000000000)=""/40)

[ 2711.999119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:51 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x401c5820, &(0x7f0000000000)=""/40)

[ 2712.031946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:51 executing program 3:
syz_80211_inject_frame(&(0x7f0000000040)=@broadcast, &(0x7f0000000080)=@mgmt_frame=@probe_request={@wo_ht={{}, {}, @broadcast}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @void}, 0x39)

[ 2712.099570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2712.131217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2712.136047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2712.183313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2712.202705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:51 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0xffffffffc70fdf50, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

21:59:51 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2712.226821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
21:59:51 executing program 6:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4020940d, &(0x7f0000000000)=""/40)

21:59:51 executing program 0:
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ptrace(0xffffffffffffffff, 0x0)
fork()
r0 = fork()
ptrace(0x10, r0)
wait4(0x0, 0x0, 0x8, &(0x7f0000001ac0))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x2, 0x9, 0x5, 0x0, 0x2, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x5, 0x3, 0xf3, 0x0, 0x39b4, 0x0, 0x6, 0x0, 0x9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)

[ 2712.361720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2712.446763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2714.860272] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2714.863792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2714.866314] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2714.873162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2714.877513] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2716.955599] Bluetooth: hci2: command tx timeout
[ 2719.003560] Bluetooth: hci2: command tx timeout
[ 2721.053156] Bluetooth: hci2: command tx timeout
[ 2723.102699] Bluetooth: hci2: command tx timeout
[ 2741.704953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2741.706254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2741.768273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2741.769590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2742.185212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2742.190287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2742.217966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2744.758346] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2744.764015] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2744.767897] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2744.777918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2744.782396] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2746.844562] Bluetooth: hci2: command tx timeout
[ 2748.892550] Bluetooth: hci2: command tx timeout
[ 2750.940580] Bluetooth: hci2: command tx timeout
[ 2752.987608] Bluetooth: hci2: command tx timeout
[ 2755.931616] Bluetooth: hci3: command 0x0406 tx timeout
[ 2772.078533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2772.079697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2772.230845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2772.231994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2772.803179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2772.809132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2772.840001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2775.410496] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2775.413833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2775.415826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2775.426300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2775.429787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2777.499514] Bluetooth: hci2: command tx timeout
[ 2779.547532] Bluetooth: hci2: command tx timeout
[ 2781.597239] Bluetooth: hci2: command tx timeout
[ 2783.643518] Bluetooth: hci2: command tx timeout
[ 2800.987616] Bluetooth: hci6: command 0x0406 tx timeout
[ 2802.249184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2802.250668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2802.374471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2802.376581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2802.855486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2802.861824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2802.894508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2805.483240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2805.489153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2805.491190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2805.500997] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2805.507764] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2807.579539] Bluetooth: hci2: command tx timeout
[ 2809.628120] Bluetooth: hci2: command tx timeout
[ 2811.675557] Bluetooth: hci2: command tx timeout
[ 2813.723576] Bluetooth: hci2: command tx timeout
[ 2832.567946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2832.569307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2832.702100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2832.704084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2833.176816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2833.183378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2833.218147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2835.774153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2835.777098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2835.778918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2835.783298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2835.786624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2837.851643] Bluetooth: hci2: command tx timeout
[ 2839.899540] Bluetooth: hci2: command tx timeout
[ 2841.948808] Bluetooth: hci2: command tx timeout
[ 2843.995537] Bluetooth: hci2: command tx timeout
[ 2862.692272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2862.693686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2862.757902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2862.759029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2863.203396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2863.211067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2863.237787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2865.774534] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2865.780171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2865.782274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2865.789583] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2865.794349] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2867.867495] Bluetooth: hci2: command tx timeout
[ 2869.915562] Bluetooth: hci2: command tx timeout
[ 2871.963491] Bluetooth: hci2: command tx timeout
[ 2874.012506] Bluetooth: hci2: command tx timeout
[ 2892.801781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2892.802987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2892.865560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2892.867111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2893.250336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2893.257042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2893.276946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2895.736379] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2895.742288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2895.744606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2895.751215] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2895.771157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2897.819536] Bluetooth: hci2: command tx timeout
[ 2899.867820] Bluetooth: hci2: command tx timeout
[ 2901.915517] Bluetooth: hci2: command tx timeout
[ 2903.964587] Bluetooth: hci2: command tx timeout
[ 2923.204296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2923.206166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2923.377691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2923.378875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2923.899743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2923.940678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2926.514267] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2926.518444] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2926.520666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2926.524718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2926.528383] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2928.603518] Bluetooth: hci2: command tx timeout
[ 2930.651494] Bluetooth: hci2: command tx timeout
[ 2932.699507] Bluetooth: hci2: command tx timeout
[ 2934.748454] Bluetooth: hci2: command tx timeout
[ 2953.638387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2953.639518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2953.677487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2953.678559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2954.141264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2954.146315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2954.166465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2956.664949] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2956.667281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2956.670771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2956.677255] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2956.684367] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2958.747520] Bluetooth: hci2: command tx timeout
[ 2960.795491] Bluetooth: hci2: command tx timeout
[ 2962.844523] Bluetooth: hci2: command tx timeout
[ 2964.892610] Bluetooth: hci2: command tx timeout
[ 2983.756973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2983.758120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2983.871076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2983.872626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2984.384062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2984.396174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2984.425222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2986.929817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2986.935658] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2986.938171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2986.945895] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2986.950977] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2989.019587] Bluetooth: hci2: command tx timeout
[ 2991.067475] Bluetooth: hci2: command tx timeout
[ 2993.115551] Bluetooth: hci2: command tx timeout
[ 2995.163575] Bluetooth: hci2: command tx timeout
[ 3014.048883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3014.049990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3014.191025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 3014.192585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 3014.766466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3014.777659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3014.784265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3014.788891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3015.095855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3015.100718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3015.105983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium

VM DIAGNOSIS:
22:04:58  Registers:
info registers vcpu 0
RAX=ffffffff85a2c840 RBX=0000000000000001 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff84bd2e3b RDI=ffffed100d9c490b RBP=ffff88806ce24858 RSP=ffffffff85a07b50
R8 =ffffffff816173d6 R9 =ffffe8ffffc19078 R10=ffffffff85a079d8 R11=0000000000000024
R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000046
RIP=ffffffff8151c7a2 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55dd000 00000000 00000000
LDT=0000 fffffe3d00000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d8282f2cf8 CR3=000000001dc3e000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000006000000030000000200000000
XMM02=746e696820636578650a0a0100010101 XMM03=6508006c61746f7420636578650a0073
XMM04=7566206365786509006e656720636578 XMM05=0065676169727420636578650b007a7a
XMM06=1100657a696d696e696d20636578650d XMM07=7472617473657220726f747563657865
XMM08=746f7420636578650a0073746e696820 XMM09=786509006e6567206365786508006c61
XMM10=727420636578650b007a7a7566206365 XMM11=6d696e696d20636578650d0065676169
XMM12=657220726f7475636578651100657a69 XMM13=6e616320636578650e00737472617473
XMM14=616d7320636578650a00657461646964 XMM15=0000736465657320636578650a006873
info registers vcpu 1
RAX=1ffff1100184579d RBX=1ffff11007157f4d RCX=0000000000000000 RDX=dffffc0000000000
RSI=ffff88800c22bcd0 RDI=ffffffff85b240e0 RBP=ffff888038abfb10 RSP=ffff888038abfa20
R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff85b240e0 R11=0000000000000001
R12=ffff88800c22bce8 R13=ffff888038abfae8 R14=0000000000000001 R15=0000000000000086
RIP=ffffffff8150cc8e RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 000055558e1de400 00000000 00000000
GS =0000 ffff8880e56dd000 00000000 00000000
LDT=0000 fffffe2800000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d8282ce618 CR3=000000003c987000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=0000000000000000414dd17c00000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000