0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 204.881777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.895490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 205.029408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.056589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.070342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 205.121322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 205.180972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.201766] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.269513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.280566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.286414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 205.317488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 205.464702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 205.559680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 205.795214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.811780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.831781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.839255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 205.990570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.026772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 206.166616] Bluetooth: hci0: command 0x040f tx timeout [ 206.343776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 206.430736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.468717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 206.557059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 206.747010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 206.828589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.020308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.024249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.034900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 207.082783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.109615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.115749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 207.518572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.533988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.543199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.608634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.625526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 207.704275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.710471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 207.760377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 208.094989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.109389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.122464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.134513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 208.142513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 208.192831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.246327] Bluetooth: hci0: command 0x0419 tx timeout 07:51:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 208.545815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.563814] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 208.646555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.657821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.664948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 208.767230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 208.917848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.925265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 209.117124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:09 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 209.235489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 209.427084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.434246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 209.613458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 209.662812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 209.883807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.892659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.985942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.998458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 210.029202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.041995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.056311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 210.111243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 210.312043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.326055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 210.600941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.617394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.640706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.648988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.656117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 210.709927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 211.161587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.176400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 211.347359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.366952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.366962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.368017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:12 executing program 1: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 211.417336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.450850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:12 executing program 1: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 211.725729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.735084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.748552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.789781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 212.066567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.078109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:12 executing program 1: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 212.292061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.300416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 212.378302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.391563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.401865] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 212.471511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 212.816794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.824377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 212.977260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.993598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 213.045241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.084669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 213.246086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.258232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 213.596108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.619109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.728363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.767106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 213.775415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.782703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 214.156382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.163532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 214.305675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.315325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.318428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 214.415227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 214.542201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.562114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 214.826737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.837231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.837385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.866534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 214.870965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.873656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.906054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 214.958122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 215.052345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.086070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 215.407557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.422282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.434615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.463103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.492811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 215.510863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.530059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 215.601063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 215.653331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 215.695073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 216.031074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.046217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.048561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.101669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.222200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.225906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 216.273342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.322923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 216.795232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 216.837548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.919501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.927964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 216.964000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.994867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 217.344426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.364981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 217.413052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.445052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 217.491853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.515292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 217.763745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 217.813567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 218.296565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.304150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 218.364314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 218.439991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 218.858947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.866085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff0000060095000100"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff0000060095000100"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 219.332150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.355152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff0000060095000100"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 219.463884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 219.524783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 219.896944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 219.954132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff0000060095000100"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 220.229837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:20 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:20 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 220.294269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff0000060095000100"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff0000060095000100"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 220.720373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff0000060095000100000006"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:21 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:21 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 220.825998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff0000060095000100000006"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 221.233761] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 221.291666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.292288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.313866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:21 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff0000060095000100000006"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:21 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 221.577422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.585005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 221.844915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.866223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:22 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:22 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 222.174650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.209664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:22 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 222.593247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.636755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.722548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 222.787386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:23 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 223.382515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.412626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:24 executing program 2: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 223.832457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.846230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 223.938522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.958280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:24 executing program 2: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 224.430795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:25 executing program 2: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 224.491146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee92", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 224.674579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.703400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:25 executing program 4: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:25 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 224.887671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee92", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 224.954501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB=' ', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 225.196718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.223858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:25 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 225.428054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.437833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:26 executing program 4: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 225.490418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.509272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB=' ', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 225.777173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.784336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB=' ', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:26 executing program 4: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:26 executing program 5: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 225.986031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381ce", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 226.034567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 226.252402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 07:51:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381ce", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 226.400165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 226.538429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.569292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381ce", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:27 executing program 5: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) [ 227.073801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.096511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.120279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.133668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.189737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.191174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:27 executing program 5: sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) [ 227.472241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.491819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 07:51:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, 0x0}, 0x10) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabda3804ca19be6c21c9cfeee927bf1300183caa8ff93c7cb88ef494ef9ee4d776d93178a1539c41e7b87985658a97db023fc1231c2d0f7e6f3eb56b3322479e0b0a6004326fc702bc00e1d0500000000000000f17d6c1195b58d857dc4762addbdaf5781eeb2941f4987b8c26fbac6232f632b", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff000006009500010000000600950001800000"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008040) 07:51:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabd", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 07:51:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4], 0x1, 0x0) 07:51:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="204b04849a43280bb026cadec595854e963eeca9aca18e649dd6a4e9dec3df285aede3be898cf6eb4053152423c099053a2381cea5af1684f1b4a89ccc9d611f4149b6d1256dc9ca935988d53b1c94127f531964eeb5afc0abbabd", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf25570000000c0099000600000071000000060095005e49000006009500800000000600950006000000060095000500000006009500f7ff00000600950001000000060095"], 0x58}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="2af7d9b7b44bae8ddd7d526f8bf224f267eb02a6fa29bfc0b2c74a6c66ed797981a07cbac2072ce02868ec36a27eb4d4f8447184e335f879f7e1b9218e91ad6ba5f33b5a0dee93d59109c66651aa5de835ecb5542c6a40579c07adef926f13c523d92df2480708d8c357192768656110e916f66afb936ff215e61461faaee3207d9e4ba03bec15e39d49"], 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x70, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_FRAME={0x47, 0x33, @probe_request={@with_ht={{{}, {}, @device_b, @device_b, @from_mac}}, @void, @void, @val={0x3, 0x1}, @val={0x2d, 0x1a}, @val={0x72, 0x6}}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r5, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4008800) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x50090}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 227.973826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.031702] WARNING: CPU: 1 PID: 12719 at net/mac80211/offchannel.c:419 ieee80211_start_next_roc+0x1ed/0x240 [ 228.041914] Kernel panic - not syncing: panic_on_warn set ... [ 228.041914] [ 228.044504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.049301] CPU: 1 PID: 12719 Comm: syz-executor.5 Not tainted 4.19.177-syzkaller #0 [ 228.049318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 228.049323] Call Trace: [ 228.049345] dump_stack+0x1fc/0x2ef [ 228.049363] panic+0x26a/0x50e [ 228.049376] ? __warn_printk+0xf3/0xf3 [ 228.049399] ? ieee80211_start_next_roc+0x1ed/0x240 [ 228.049414] ? __probe_kernel_read+0x130/0x1b0 [ 228.049424] ? __warn.cold+0x5/0x5a [ 228.049444] ? ieee80211_start_next_roc+0x1ed/0x240 [ 228.104725] __warn.cold+0x20/0x5a [ 228.108296] ? ieee80211_start_next_roc+0x1ed/0x240 [ 228.113356] report_bug+0x262/0x2b0 [ 228.117012] do_error_trap+0x1d7/0x310 [ 228.120908] ? math_error+0x310/0x310 [ 228.124715] ? __mutex_lock+0x3a8/0x1260 [ 228.129049] ? error_entry+0x72/0xd0 [ 228.132760] ? trace_hardirqs_off_caller+0x6e/0x210 [ 228.137792] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 228.142627] invalid_op+0x14/0x20 [ 228.146069] RIP: 0010:ieee80211_start_next_roc+0x1ed/0x240 [ 228.151684] Code: 98 16 00 00 48 89 ef 48 89 c2 e8 2e e2 0a 00 5b 5d e9 77 bc cb f9 e8 72 bc cb f9 48 89 ef e8 7a 6c ff ff eb 94 e8 63 bc cb f9 <0f> 0b eb 8b e8 6a 6e 01 fa e9 be fe ff ff 48 c7 c7 80 cd 45 8a e8 [ 228.170593] RSP: 0018:ffff888043e67468 EFLAGS: 00010216 [ 228.175971] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc90010676000 [ 228.183235] RDX: 000000000000c985 RSI: ffffffff8796a2bd RDI: 0000000000000001 [ 228.190511] RBP: ffff88804b281d20 R08: 0000000000000001 R09: 0000000000000000 [ 228.197800] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 228.205073] R13: 0000000000000001 R14: dffffc0000000000 R15: ffff88804b282c00 [ 228.212347] ? ieee80211_start_next_roc+0x1ed/0x240 [ 228.217353] ? ieee80211_start_next_roc+0x1ed/0x240 [ 228.222477] __ieee80211_scan_completed+0x571/0x1690 [ 228.227595] ? ieee80211_scan_cancel+0x314/0x940 [ 228.232384] ieee80211_scan_cancel+0x340/0x940 [ 228.236981] ieee80211_do_stop+0x18c6/0x1ff0 [ 228.241391] ? mark_held_locks+0xa6/0xf0 [ 228.245445] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 228.250052] ? ieee80211_adjust_monitor_flags+0x230/0x230 [ 228.255591] ? retint_kernel+0x2d/0x2d [ 228.259475] ieee80211_if_change_type+0x2b8/0x6a0 [ 228.264312] ieee80211_change_iface+0x26/0x220 [ 228.268949] cfg80211_change_iface+0x2e1/0x1530 [ 228.273636] nl80211_set_interface+0x661/0x830 [ 228.278211] ? retint_kernel+0x2d/0x2d [ 228.282090] ? nl80211_dump_interface+0x6e0/0x6e0 [ 228.286939] ? __cfg80211_rdev_from_attrs+0x700/0x700 [ 228.292133] genl_family_rcv_msg+0x642/0xc40 [ 228.296567] ? genl_rcv+0x40/0x40 [ 228.300019] ? genl_rcv_msg+0x12f/0x160 [ 228.303992] ? __mutex_add_waiter+0x160/0x160 [ 228.308613] ? __radix_tree_lookup+0x216/0x370 [ 228.313205] genl_rcv_msg+0xbf/0x160 [ 228.316937] netlink_rcv_skb+0x160/0x440 [ 228.321013] ? genl_family_rcv_msg+0xc40/0xc40 [ 228.325671] ? netlink_ack+0xae0/0xae0 [ 228.329564] ? genl_rcv+0x15/0x40 [ 228.333026] genl_rcv+0x24/0x40 [ 228.336303] netlink_unicast+0x4d5/0x690 [ 228.340389] ? netlink_sendskb+0x110/0x110 [ 228.344609] ? netlink_sendmsg+0x638/0xc40 [ 228.348842] netlink_sendmsg+0x6bb/0xc40 [ 228.352901] ? aa_af_perm+0x230/0x230 [ 228.356695] ? nlmsg_notify+0x1a0/0x1a0 [ 228.360688] ? nlmsg_notify+0x1a0/0x1a0 [ 228.364644] sock_sendmsg+0xc3/0x120 [ 228.368358] __sys_sendto+0x21a/0x320 [ 228.372170] ? __ia32_sys_getpeername+0xb0/0xb0 [ 228.376837] ? debug_object_active_state+0x254/0x330 [ 228.381953] ? lock_acquire+0x170/0x3c0 [ 228.385970] ? task_work_run+0x64/0x1c0 [ 228.389947] ? blkcg_schedule_throttle+0x1f0/0x1f0 [ 228.394874] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 228.399447] ? _raw_spin_unlock_irq+0x5a/0x80 [ 228.403938] ? task_work_run+0x126/0x1c0 [ 228.408007] __x64_sys_sendto+0xdd/0x1b0 [ 228.412080] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 228.416674] do_syscall_64+0xf9/0x620 [ 228.420492] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 228.425668] RIP: 0033:0x41938c [ 228.428875] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 228.447871] RSP: 002b:00007feb4d7acf80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 228.455604] RAX: ffffffffffffffda RBX: 00007feb4d7ad0f0 RCX: 000000000041938c [ 228.462909] RDX: 0000000000000024 RSI: 00007feb4d7ad140 RDI: 0000000000000007 [ 228.470171] RBP: 0000000000000000 R08: 00007feb4d7acfd4 R09: 000000000000000c [ 228.477439] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 228.484692] R13: 00007feb4d7ad140 R14: 0000000000000007 R15: 0000000000000000 [ 228.492737] Kernel Offset: disabled [ 228.496421] Rebooting in 86400 seconds..