xf, 0x7f, [@local, @private=0xa010101, @private=0xa010100]}, @timestamp={0x44, 0x10, 0xdc, 0x0, 0x2, [0x2, 0xb51, 0x3]}, @noop, @ssrr={0x89, 0x1f, 0x87, [@remote, @remote, @remote, @loopback, @remote, @broadcast, @loopback]}, @generic={0x44, 0xe, "e47bef8b07caa6a4cd80d3d7"}, @lsrr={0x83, 0xb, 0x7c, [@remote, @multicast2]}, @noop, @generic={0x82, 0x2}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x40, 0x8, 0x101, 0x1a4, {{0x1c, 0x4, 0x3, 0x1, 0x70, 0x69, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@cipso={0x86, 0x1c, 0x0, [{0x2, 0x7, "756d1446d8"}, {0x7, 0x4, "37c0"}, {0x7, 0x2}, {0x5, 0x9, "a2047589d2b883"}]}, @timestamp_addr={0x44, 0x3c, 0xd7, 0x1, 0x7, [{@multicast2, 0x3}, {@remote, 0x4}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x6}, {@broadcast, 0x8}, {@empty, 0x3ff}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r11, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'tunl0\x00', &(0x7f00000009c0)={'sit0\x00', 0x0, 0x70f, 0x80, 0x6, 0x1, {{0x10, 0x4, 0x1, 0xc, 0x40, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xfd, 0x3, 0x1, [{@rand_addr=0x64010101, 0x1}, {@remote, 0xca}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xfffffffa}]}, @end, @timestamp={0x44, 0x8, 0x4f, 0x0, 0x3, [0x8000]}, @ra={0x94, 0x4, 0x1}, @noop, @noop, @end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001600)={&(0x7f0000001c80)={0xb78, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51a}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x80, 0x0, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfb17}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf040000}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x21f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r11}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xf8, 0x1f, 0x1c, 0x4}, {0x1, 0x1, 0xb6, 0x8}, {0x3e, 0x1, 0xf9, 0xfffffffa}, {0xff4f, 0x3f, 0x4f}, {0xff, 0x2, 0x0, 0x6}, {0x4, 0x53, 0x0, 0xfff}, {0x7, 0x2, 0x7, 0xc00000}, {0xac0a, 0xff, 0xfe, 0x7f}, {0xffff, 0x3f, 0x3d, 0x2227}, {0x3ff, 0xd2, 0x5, 0x8}]}}}]}}, {{0x8, 0x1, r12}, {0x174, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xb78}, 0x1, 0x0, 0x0, 0x10}, 0x8084) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r17, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000010) (async) 00:12:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x3000000000000}, 0x0) 00:12:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x2000}, 0x0) 00:12:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2080, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) (async) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8eed}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000040) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x4c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}]]}, 0x4c}}, 0x0) 00:12:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c4}, 0x20000010) 00:12:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x80, 0x80, 0x8, 0x458, {{0x1c, 0x4, 0x3, 0x5, 0x70, 0x67, 0x0, 0x47, 0x4, 0x0, @broadcast, @remote, {[@rr={0x7, 0xf, 0x7f, [@local, @private=0xa010101, @private=0xa010100]}, @timestamp={0x44, 0x10, 0xdc, 0x0, 0x2, [0x2, 0xb51, 0x3]}, @noop, @ssrr={0x89, 0x1f, 0x87, [@remote, @remote, @remote, @loopback, @remote, @broadcast, @loopback]}, @generic={0x44, 0xe, "e47bef8b07caa6a4cd80d3d7"}, @lsrr={0x83, 0xb, 0x7c, [@remote, @multicast2]}, @noop, @generic={0x82, 0x2}, @noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x40, 0x8, 0x101, 0x1a4, {{0x1c, 0x4, 0x3, 0x1, 0x70, 0x69, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@cipso={0x86, 0x1c, 0x0, [{0x2, 0x7, "756d1446d8"}, {0x7, 0x4, "37c0"}, {0x7, 0x2}, {0x5, 0x9, "a2047589d2b883"}]}, @timestamp_addr={0x44, 0x3c, 0xd7, 0x1, 0x7, [{@multicast2, 0x3}, {@remote, 0x4}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x6}, {@broadcast, 0x8}, {@empty, 0x3ff}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) (async) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r11, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'tunl0\x00', &(0x7f00000009c0)={'sit0\x00', 0x0, 0x70f, 0x80, 0x6, 0x1, {{0x10, 0x4, 0x1, 0xc, 0x40, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xfd, 0x3, 0x1, [{@rand_addr=0x64010101, 0x1}, {@remote, 0xca}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xfffffffa}]}, @end, @timestamp={0x44, 0x8, 0x4f, 0x0, 0x3, [0x8000]}, @ra={0x94, 0x4, 0x1}, @noop, @noop, @end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001600)={&(0x7f0000001c80)={0xb78, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51a}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x80, 0x0, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfb17}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf040000}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x21f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r11}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xf8, 0x1f, 0x1c, 0x4}, {0x1, 0x1, 0xb6, 0x8}, {0x3e, 0x1, 0xf9, 0xfffffffa}, {0xff4f, 0x3f, 0x4f}, {0xff, 0x2, 0x0, 0x6}, {0x4, 0x53, 0x0, 0xfff}, {0x7, 0x2, 0x7, 0xc00000}, {0xac0a, 0xff, 0xfe, 0x7f}, {0xffff, 0x3f, 0x3d, 0x2227}, {0x3ff, 0xd2, 0x5, 0x8}]}}}]}}, {{0x8, 0x1, r12}, {0x174, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xb78}, 0x1, 0x0, 0x0, 0x10}, 0x8084) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async, rerun: 32) r15 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r17, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async, rerun: 32) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (rerun: 32) 00:12:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x40030000000000}, 0x0) 00:12:22 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf25520000000c00990000020000110000000400cf00"], 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x804) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="cdb63f435f6118e33316fe7d818d0d127ceb9e427441e37416b06692800ebb6d84c2b8ca975db238d36a08e95a6d380d8037b90c321d165a6aacc4f3e35e26bf89350645752c2f6d2609c90b62ff87076cdc6f414b2dd3c89847dc40c1d5fdcde51084d79241c6118affa26902955a5473553515b254cc041932567d39f56f35d42eb41079b03dc24197bf3ce35cb367d4333cfd2a9811c80970c8"], 0x1c}}, 0x0) 00:12:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x500, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0xc6, 0x5, 0x3, 0x10, @private1, @empty, 0x40, 0x7800, 0xfffffff7, 0x6}}) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="17417402", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf250100000014000900fc01000000000000000000000000000108000600000000000800060064010101060001004e2400000500040002000000050004000100000008000b00", @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x20000044) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000500)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000480)={'tunl0\x00', 0x0, 0x80, 0x80, 0x8, 0x458, {{0x1c, 0x4, 0x3, 0x5, 0x70, 0x67, 0x0, 0x47, 0x4, 0x0, @broadcast, @remote, {[@rr={0x7, 0xf, 0x7f, [@local, @private=0xa010101, @private=0xa010100]}, @timestamp={0x44, 0x10, 0xdc, 0x0, 0x2, [0x2, 0xb51, 0x3]}, @noop, @ssrr={0x89, 0x1f, 0x87, [@remote, @remote, @remote, @loopback, @remote, @broadcast, @loopback]}, @generic={0x44, 0xe, "e47bef8b07caa6a4cd80d3d7"}, @lsrr={0x83, 0xb, 0x7c, [@remote, @multicast2]}, @noop, @generic={0x82, 0x2}, @noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x40, 0x8, 0x101, 0x1a4, {{0x1c, 0x4, 0x3, 0x1, 0x70, 0x69, 0x0, 0x1, 0x2f, 0x0, @rand_addr=0x64010102, @loopback, {[@cipso={0x86, 0x1c, 0x0, [{0x2, 0x7, "756d1446d8"}, {0x7, 0x4, "37c0"}, {0x7, 0x2}, {0x5, 0x9, "a2047589d2b883"}]}, @timestamp_addr={0x44, 0x3c, 0xd7, 0x1, 0x7, [{@multicast2, 0x3}, {@remote, 0x4}, {@remote, 0x2}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x6}, {@broadcast, 0x8}, {@empty, 0x3ff}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) (async) r7 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r8 = socket(0x10, 0x3, 0x0) (rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4005}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r11, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000700)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a40)={'tunl0\x00', &(0x7f00000009c0)={'sit0\x00', 0x0, 0x70f, 0x80, 0x6, 0x1, {{0x10, 0x4, 0x1, 0xc, 0x40, 0x64, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xfd, 0x3, 0x1, [{@rand_addr=0x64010101, 0x1}, {@remote, 0xca}, {@dev={0xac, 0x14, 0x14, 0x10}, 0xfffffffa}]}, @end, @timestamp={0x44, 0x8, 0x4f, 0x0, 0x3, [0x8000]}, @ra={0x94, 0x4, 0x1}, @noop, @noop, @end]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001600)={&(0x7f0000001c80)={0xb78, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000000}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x51a}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x80, 0x0, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfb17}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x100000}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf040000}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x1fc, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x21f}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r11}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0xf8, 0x1f, 0x1c, 0x4}, {0x1, 0x1, 0xb6, 0x8}, {0x3e, 0x1, 0xf9, 0xfffffffa}, {0xff4f, 0x3f, 0x4f}, {0xff, 0x2, 0x0, 0x6}, {0x4, 0x53, 0x0, 0xfff}, {0x7, 0x2, 0x7, 0xc00000}, {0xac0a, 0xff, 0xfe, 0x7f}, {0xffff, 0x3f, 0x3d, 0x2227}, {0x3ff, 0xd2, 0x5, 0x8}]}}}]}}, {{0x8, 0x1, r12}, {0x174, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xb78}, 0x1, 0x0, 0x0, 0x10}, 0x8084) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r17, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = pidfd_getfd(r3, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r4, 0x20b33000) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x408, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) 00:12:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2080, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8eed}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000040) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x4c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}]]}, 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2080, 0x0) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) write(r4, &(0x7f0000004200)='t', 0x1) (async) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8eed}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000040) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x4c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}]]}, 0x4c}}, 0x0) (async) 00:12:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) (async) r4 = pidfd_getfd(r3, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r4, 0x20b33000) (async) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x408, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) 00:12:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x500, 0x4) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x500, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0xc6, 0x5, 0x3, 0x10, @private1, @empty, 0x40, 0x7800, 0xfffffff7, 0x6}}) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="17417402", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf250100000014000900fc01000000000000000000000000000108000600000000000800060064010101060001004e2400000500040002000000050004000100000008000b00", @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x20000044) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000500)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x100000000000000}, 0x0) 00:12:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x2c00}, 0x0) 00:12:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '*'}, {0x20, '%'}, {0x20, '\x02\x02\x02\x02\x02\x02'}, {0x20, 'ethtool\x00'}], 0xa, "dcadeefe55f6cad20c356341561b"}, 0x2d) 00:12:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x500, 0x4) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000540)={'ip6tnl0\x00', 0x0, 0x29, 0xc6, 0x5, 0x3, 0x10, @private1, @empty, 0x40, 0x7800, 0xfffffff7, 0x6}}) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="17417402", @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf250100000014000900fc01000000000000000000000000000108000600000000000800060064010101060001004e2400000500040002000000050004000100000008000b00", @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x8004}, 0x20000044) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000500)) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) (async) r4 = pidfd_getfd(r3, r0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r4, 0x20b33000) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x408, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0xc800) 00:12:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSS_SELECT={0x28, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xe, 0x20}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xc, 0x7f}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x4}]}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 00:12:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '*'}, {0x20, '%'}, {0x20, '\x02\x02\x02\x02\x02\x02'}, {0x20, 'ethtool\x00'}], 0xa, "dcadeefe55f6cad20c356341561b"}, 0x2d) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '*'}, {0x20, '%'}, {0x20, '\x02\x02\x02\x02\x02\x02'}, {0x20, 'ethtool\x00'}], 0xa, "dcadeefe55f6cad20c356341561b"}, 0x2d) (async) 00:12:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x800) 00:12:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x200000000000000}, 0x0) 00:12:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) (async) write(r2, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) 00:12:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSS_SELECT={0x28, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xe, 0x20}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xc, 0x7f}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x4}]}]}, 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, '*'}, {0x20, '%'}, {0x20, '\x02\x02\x02\x02\x02\x02'}, {0x20, 'ethtool\x00'}], 0xa, "dcadeefe55f6cad20c356341561b"}, 0x2d) 00:12:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x4000}, 0x0) 00:12:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) (rerun: 64) 00:12:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x44, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSS_SELECT={0x28, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xe, 0x20}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xc, 0x7f}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x4}]}]}, 0x44}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x300000000000000}, 0x0) 00:12:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x800) 00:12:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r13, &(0x7f0000004200)='t', 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x8, 0x700, 0x5, 0x99039d79, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x65, 0x0, 0x34, 0x2f, 0x0, @local, @broadcast, {[@ssrr={0x89, 0xf, 0xa3, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xb7, 0x1, 0x1, [{@remote, 0x7}]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x1b, 0xef, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @remote, @broadcast, @broadcast, @remote]}]}}}}}) sendmsg$nl_route(r13, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_newroute={0x34, 0x18, 0x0, 0x70bd2c, 0x25dfdbfe, {0x2, 0x80, 0x10, 0x40, 0x0, 0xc9d864a8f9f890dc, 0xc8, 0x7, 0x500}, [@RTA_PREFSRC={0x8, 0x7, @local}, @RTA_IIF={0x8, 0x3, r14}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r7, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x64}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x26}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040851}, 0x40) r15 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r15, &(0x7f0000004200)='t', 0x1) copy_file_range(r15, &(0x7f0000000380)=0x10000, 0xffffffffffffffff, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r17, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x4c, r2, 0x1, 0x0, 0x0, {0x9}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x94, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x200}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdd}, {0x6, 0x16, 0x4}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r3, 0x5, 0x0, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:12:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x400000000000000}, 0x0) 00:12:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x8401, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x11) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r10, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x8800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r11) sendmsg$TIPC_CMD_GET_NODES(r13, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r14, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x440d0}, 0x4c004) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r15, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r16 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r16) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x800) (async) 00:12:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x4c, r2, 0x1, 0x0, 0x0, {0x9}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x94, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x200}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdd}, {0x6, 0x16, 0x4}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r3, 0x5, 0x0, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:12:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r13, &(0x7f0000004200)='t', 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x8, 0x700, 0x5, 0x99039d79, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x65, 0x0, 0x34, 0x2f, 0x0, @local, @broadcast, {[@ssrr={0x89, 0xf, 0xa3, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xb7, 0x1, 0x1, [{@remote, 0x7}]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x1b, 0xef, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @remote, @broadcast, @broadcast, @remote]}]}}}}}) sendmsg$nl_route(r13, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_newroute={0x34, 0x18, 0x0, 0x70bd2c, 0x25dfdbfe, {0x2, 0x80, 0x10, 0x40, 0x0, 0xc9d864a8f9f890dc, 0xc8, 0x7, 0x500}, [@RTA_PREFSRC={0x8, 0x7, @local}, @RTA_IIF={0x8, 0x3, r14}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r7, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x64}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x26}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040851}, 0x40) (async) r15 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r15, &(0x7f0000004200)='t', 0x1) copy_file_range(r15, &(0x7f0000000380)=0x10000, 0xffffffffffffffff, 0x0, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 64) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r17, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x6000}, 0x0) 00:12:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x8401, 0x0) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x8401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x11) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x11) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r10, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x8800) (async) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r10, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x8800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r11) (async) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r11) sendmsg$TIPC_CMD_GET_NODES(r13, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r14, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x440d0}, 0x4c004) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r15, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r15, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r16 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r16) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x500000000000000}, 0x0) 00:12:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f80), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000fc0)={0x4c, r2, 0x1, 0x0, 0x0, {0x9}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x94, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0x200}, {0x5, 0x12, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xdd}, {0x6, 0x16, 0x4}, {0x5}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r3, 0x5, 0x0, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}}, 0x0) 00:12:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (rerun: 32) write(r4, &(0x7f0000004200)='t', 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async, rerun: 64) r13 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (rerun: 64) write(r13, &(0x7f0000004200)='t', 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000480)={'gre0\x00', 0x0, 0x8, 0x700, 0x5, 0x99039d79, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x65, 0x0, 0x34, 0x2f, 0x0, @local, @broadcast, {[@ssrr={0x89, 0xf, 0xa3, [@multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xb7, 0x1, 0x1, [{@remote, 0x7}]}, @ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x1b, 0xef, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @remote, @broadcast, @broadcast, @remote]}]}}}}}) sendmsg$nl_route(r13, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@ipv4_newroute={0x34, 0x18, 0x0, 0x70bd2c, 0x25dfdbfe, {0x2, 0x80, 0x10, 0x40, 0x0, 0xc9d864a8f9f890dc, 0xc8, 0x7, 0x500}, [@RTA_PREFSRC={0x8, 0x7, @local}, @RTA_IIF={0x8, 0x3, r14}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r7, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1d}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x64}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x26}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24040851}, 0x40) (rerun: 64) r15 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r15, &(0x7f0000004200)='t', 0x1) (async) copy_file_range(r15, &(0x7f0000000380)=0x10000, 0xffffffffffffffff, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r17, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async, rerun: 32) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (rerun: 32) 00:12:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000005c0), 0x8401, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x11) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r10, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x8800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000400)={{0x1, 0x1, 0x18, r11}, './file0\x00'}) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r11) sendmsg$TIPC_CMD_GET_NODES(r13, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r14, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x440d0}, 0x4c004) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r15, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) r16 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r16) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 00:12:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x104, r1, 0x5, 0x70bd2a, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f0e5be30cb46cd4584a4ca538ac97050a179c0b420692e16"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "354a7f0e1bfaa3bafe5b9cbfff9438a6aeca6fb376d7512d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "02b7ed4732c1c022734f9ebafcb4d4210f3e04af4977b263"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b221c14ed4ce6a45b67ba25cf65d2b1ed2bb12714b31f42b"}]]}, 0x104}}, 0x4800) 00:12:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x600000000000000}, 0x0) 00:12:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000024000100"/20, @ANYRES32=r8, @ANYBLOB="00000000ffff1200010000e30800010067726564000000000c0002000800e90000000000"], 0x3c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000024000100"/20, @ANYRES32=r13, @ANYBLOB="00000000ffffffff000000000900010067726500000000000c000200080005000000000023c5fba1e78646b880a77a27c81fd381c75802447a49d07660d333244d4e"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x2, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x20, 0x7800, 0x81, 0x13ea27bf}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xd8, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4800}, 0x80c0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xe703}, 0x0) 00:12:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x104, r1, 0x5, 0x70bd2a, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f0e5be30cb46cd4584a4ca538ac97050a179c0b420692e16"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "354a7f0e1bfaa3bafe5b9cbfff9438a6aeca6fb376d7512d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "02b7ed4732c1c022734f9ebafcb4d4210f3e04af4977b263"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b221c14ed4ce6a45b67ba25cf65d2b1ed2bb12714b31f42b"}]]}, 0x104}}, 0x4800) 00:12:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) 00:12:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000024000100"/20, @ANYRES32=r8, @ANYBLOB="00000000ffff1200010000e30800010067726564000000000c0002000800e90000000000"], 0x3c}}, 0x0) (async) r9 = socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r12) (async) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000024000100"/20, @ANYRES32=r13, @ANYBLOB="00000000ffffffff000000000900010067726500000000000c000200080005000000000023c5fba1e78646b880a77a27c81fd381c75802447a49d07660d333244d4e"], 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x2, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x20, 0x7800, 0x81, 0x13ea27bf}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xd8, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4800}, 0x80c0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x104, r1, 0x5, 0x70bd2a, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f0e5be30cb46cd4584a4ca538ac97050a179c0b420692e16"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "354a7f0e1bfaa3bafe5b9cbfff9438a6aeca6fb376d7512d"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "02b7ed4732c1c022734f9ebafcb4d4210f3e04af4977b263"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b221c14ed4ce6a45b67ba25cf65d2b1ed2bb12714b31f42b"}]]}, 0x104}}, 0x4800) 00:12:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x700000000000000}, 0x0) 00:12:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (rerun: 32) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r8, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000024000100"/20, @ANYRES32=r8, @ANYBLOB="00000000ffff1200010000e30800010067726564000000000c0002000800e90000000000"], 0x3c}}, 0x0) (rerun: 64) r9 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r10 = socket(0x10, 0x3, 0x0) (rerun: 32) r11 = socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r12) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000024000100"/20, @ANYRES32=r13, @ANYBLOB="00000000ffffffff000000000900010067726500000000000c000200080005000000000023c5fba1e78646b880a77a27c81fd381c75802447a49d07660d333244d4e"], 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x2, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0x20, 0x7800, 0x81, 0x13ea27bf}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0xd8, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4800}, 0x80c0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r6, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 00:12:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 00:12:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 00:12:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4f6c8aad93b9b76b00000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0581fe19ca8491a670002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x200}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x401}]}, 0x44}, 0x1, 0x0, 0x0, 0x808}, 0x44) 00:12:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x20000}, 0x0) 00:12:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x800000000000000}, 0x0) 00:12:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 00:12:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xc37a}, &(0x7f0000000040)=0x8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002000800000001000300765a20d3c49afc2e446d487c3385e0073bbfd5a6f7737d47bd7c2d73e63b9392ff62b084acae4911485fc700ada99248cf680a689d5ecf33257366c94831024e47d7c526aaf4ffdf05dd7e8bc1ca969d15c0985699d18caa528f82e202402e0ada02d0fe2bfc4d1635955c0d0351751729f9072d3c26860000000000", @ANYRES32=r1, @ANYBLOB="08002600000200000800570000000000e1540bb99513"], 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_io_uring_setup(0x3aa4, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) r5 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000080)=0x8, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000780)={r7, "588a3cbe9b462a1364e4c8536b9d85ac"}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000009c0)={0x0, 0x2, {0x5, @struct={0x9969, 0x3f}, 0x0, 0x8, 0x1000, 0x3f, 0x8000, 0x9, 0x10, @usage=0x1, 0x1, 0x9, [0x4, 0x4, 0x3f, 0x400, 0x1]}, {0xffffffffffffffff, @struct={0x40, 0x81}, 0x0, 0x88e, 0x3, 0x8, 0x4, 0x2, 0x20, @usage=0x9, 0x1, 0x8, [0x1, 0xffff, 0x1ff, 0x7, 0x340000000, 0xe631]}, {0x3, @struct={0x0, 0x8000}, r7, 0x5, 0x3f24, 0x9, 0x5, 0x618d, 0x0, @usage, 0x8, 0x133, [0xffff, 0x5, 0x4c25762, 0x7, 0x8000000000000001, 0x1]}, {0x10001}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg\x00'}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000004c0)={r7, 0x0, 0x8, 0x1}) 00:12:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x200}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x401}]}, 0x44}, 0x1, 0x0, 0x0, 0x808}, 0x44) 00:12:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x50, 0x0, 0x800, 0x0, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0x4c001) 00:12:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4f6c8aad93b9b76b00000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0581fe19ca8491a670002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4f6c8aad93b9b76b00000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0581fe19ca8491a670002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) 00:12:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x900000000000000}, 0x0) 00:12:25 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x200}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x401}]}, 0x44}, 0x1, 0x0, 0x0, 0x808}, 0x44) (async) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x200}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x401}]}, 0x44}, 0x1, 0x0, 0x0, 0x808}, 0x44) 00:12:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xc37a}, &(0x7f0000000040)=0x8) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002000800000001000300765a20d3c49afc2e446d487c3385e0073bbfd5a6f7737d47bd7c2d73e63b9392ff62b084acae4911485fc700ada99248cf680a689d5ecf33257366c94831024e47d7c526aaf4ffdf05dd7e8bc1ca969d15c0985699d18caa528f82e202402e0ada02d0fe2bfc4d1635955c0d0351751729f9072d3c26860000000000", @ANYRES32=r1, @ANYBLOB="08002600000200000800570000000000e1540bb99513"], 0x2c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_io_uring_setup(0x3aa4, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) (async) r5 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000080)=0x8, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000780)={r7, "588a3cbe9b462a1364e4c8536b9d85ac"}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000009c0)={0x0, 0x2, {0x5, @struct={0x9969, 0x3f}, 0x0, 0x8, 0x1000, 0x3f, 0x8000, 0x9, 0x10, @usage=0x1, 0x1, 0x9, [0x4, 0x4, 0x3f, 0x400, 0x1]}, {0xffffffffffffffff, @struct={0x40, 0x81}, 0x0, 0x88e, 0x3, 0x8, 0x4, 0x2, 0x20, @usage=0x9, 0x1, 0x8, [0x1, 0xffff, 0x1ff, 0x7, 0x340000000, 0xe631]}, {0x3, @struct={0x0, 0x8000}, r7, 0x5, 0x3f24, 0x9, 0x5, 0x618d, 0x0, @usage, 0x8, 0x133, [0xffff, 0x5, 0x4c25762, 0x7, 0x8000000000000001, 0x1]}, {0x10001}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg\x00'}) (async) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000004c0)={r7, 0x0, 0x8, 0x1}) 00:12:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x50, 0x0, 0x800, 0x0, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0x4c001) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x50, 0x0, 0x800, 0x0, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0x4c001) 00:12:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4f6c8aad93b9b76b00000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0581fe19ca8491a670002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x30000}, 0x0) 00:12:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000011c0)=ANY=[@ANYBLOB="98030000", @ANYRESDEC, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYRES8=r2, @ANYBLOB="c9f4434ad08ddf29b5fd783a00a20e34b9ec49038975a96a4a19a6eab2081ee76d1b7d098d2d17b085fb444362c1d886c162d9105517d53ba0eb7f11b700da05000000b4af5516d6505ab585562e14f025df4ef735f9eff2812dcc82d549cc15135a09586f5bee2aa0950d358be3a2b0c3d9b20cc0ea140efd41631325e92b7dbd0fb9f41d27c207d191551e865a7f6d0b6054a0ccfabaee62946b1df839387d2ac58cf2208aedc7628cf93451f34ca222f5accba6817014616d20b5bef3455d167ea52072e045aae36e462e277f0fd3875bdb710cd5510b7b3c420acf10c763cb0ec9e02e3b5e853899a665", @ANYRES64=r4, @ANYRESOCT=r1, @ANYRESHEX=r3], 0x398}}, 0x20040034) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0xa04, r5, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x70}}}}, [@NL80211_ATTR_FRAME={0x4e0, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7f}, @initial, @device_a, @broadcast, {0x9}}, {0x7, 0x0, 0x3, 0x0, 0x1}}, {@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @from_mac=@broadcast, {0x8, 0x894}}, {0xf, 0x0, 0x2}}}, @a_msdu=[{@broadcast, @device_b, 0x18, "113e4deef16731dba4bd8ac9b79bfbc616bbe1cbc39659a4"}, {@device_a, @device_a, 0xb3, "a6066940c5810ffb913083ee221fd4b913d1b372ddc3bc18c98b65c3e2ed3783916be5f65c89c556d2a3beaf9ac9ca9bca7b60132f053ba4a57e867d9c37679c573e5609946494171bda64405c704049bcf62c457b85d6b301c3ce74b2f8a4ae117a189e34021adbb9d00cc44466e34a9d764a4b2314acf90b7c0469c7cc04130f57d47c5d7d8a2fdcb6bde7fef0edfd15994a279b6bd85022bca783f8df0cc94a4865efb468f2bc9b8b565f640d73cf6b0ddf"}, {@device_a, @broadcast, 0xbe, "2e179bcaa22d91a5c8b614dd34326cd7d652cfcac34e93498211c1a02e721dd30d0f0dc1ce7f6fb4255a2d3ee061cc83a27e603148c786e0e7f6147f37e5ac3d9f2fab061c7e1e9ad10261a701ae5d8c241154800128defb0933728ecc4fa975dd59ecd9c5a206da3e1d1b74c723afdfe667ea78014fb47924d663880271e3389144fbdd8e7f9f05ef1d41c0fe83d5d58c13bbc81ddbaf6359ace093776242c19e9adb7a7eb4ebce304c2b7bbee9410a246f7e500f9688403f67b5f9f42c"}, {@device_a, @device_a, 0x85, "548be49efcbe0deb7fd7de63ab43bff4b8d2ff8fe457f1eecdee877635a62dc1273321cf19a14eba2ef35511800988708feba4cc604aa9d10d737b5e132cc9603fa3754a28018cf09ff6243ba63d478c6c49fbe8392edd2f6a16704c17764a92d4a2658afbe647d9c007f3b3fb5c6d9fe1076ee84fc9e97e22d33b39b2549b1208b3fc3247"}, {@device_a, @broadcast, 0x44, "52cf9685347d3aaf5e0d219e59c0ac1a1cfb9e5534f03aa88958f9d19f52ab9eeee686d58955f4648433cd8c7f934e8ad86c7039bd1826c65232b25b805dee75c7505fd4"}, {@device_a, @device_b, 0xa0, "9b184857a0ebe3577bdf4f996be6b877a8488e5569c3eda514875ed4f12189fe99536effa0e4be083e7b020b968a32613e471919ab255d1282ba821d93ed34ef55ae39c73a6efeaedd1a0751c145715409672b3c9548f861531b8e5181910184a36119d5987a00a9792bc581cc56e541e4487a71c4c2704275963accfcd624840a5895c678d73bc30bd035b1b94bf6331600fc4986b1abc894fb7cf32c077ad2"}, {@device_b, @broadcast, 0x7f, "91005b72cc041e191522dae67bb19a124e6dd63b2ef54edff1726dc16f02b31597ae8b340d8dc49dcf47dddcf0b3e9556e9de04d89d374a704bbfef61ca17ce361f2d9100bba94e49717c3e3f4e7f2e7acd22feca4ef13b81d496e8dd9139a5194dc265a738efe034bc93c1fb9b3195a0192e505d96b73abbf66baa0874497"}, {@device_b, @device_b, 0xba, "f5befc3b2ddefb4fa0a02dad1cbc58862bed5ae872800234b0f2c13ef00fae608366f213628fcbc36ef4b328e47b2efc32b2ef94647d0e8e2fb9cb85e976db70c496dc2deb5d0b80398f304921c3f6be93bb36eaf14ba7f5d86c88bad97abb656ec1866952506108230616a2b2f7af1a26b614f5a6721ef6c3fb57ee3853a0333fc9a1a9b5533a9ca2abf4d5cbae85556df3d58c8fa800c6a646c65a6b20c2e9354e5abfae1f94e8b7e9718fa3b48ed2c7da4ad551091943c616"}]}}, @NL80211_ATTR_FRAME={0x4f4, 0x33, @mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @device_b, @broadcast, @initial, {0x0, 0x3}}, @ver_80211n={0x0, 0x0, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1, 0x7, @random=0x800, @void, @val={0x2d, 0x1a, {0x40, 0x0, 0x1, 0x0, {0x10001, 0x5, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x7, 0x2}}, [{0xdd, 0x5c, "e53df28634df368d3e1ff1df1a578740b7b75cce5010b0a68c342e07d63a17c7285eee38ed3630b5f44ece1a223ab7d7defdbb818d50cb57fe813275a2e274eae50e20b88b1cdb62377f701b5695d2a49e404cb0e966de7799a3fd8c"}, {0xdd, 0xd3, "3d2f43c260a442c4891909a9592b25814d39730f03837a5500dab2912b813c55a085005ccdd01fdfe0bb3b5eedd87c982d92b6a488f6638dc90e3d83b59791c31cd818fc2aae7b77e76938b317d5a41fe35f0cb4153c44dd0d8b4b5a10781da8e526746a601458129a33d5e3aedf364a08d52e7afd9fd67805dfe93ee13edea0be4e218fd0a655a6add78447f4f71ae0d7953f1b5698119a9011aef45e98ac4ac4fc460054aa8d8666f822947e394d77585dd8fe3076438e9710a4120541a9234aaeab6b85b2cb3fadd83f24c26c5349a6f6e2"}, {0xdd, 0x73, "6312a07a8a2bfb067f4637106d2e04a251468aeabab81d67ed8a69c25197db9105d840d1f806d96da7f7dbc7a557ef62e115f99e50b7f232763f3e002b9bb198f8e3f7c8e2aa530e7e601df0e568e5ce31ffab6dce881dba293d1b47cbc7b738f1e1c91609961d9bf71080e57c27332babf15f"}, {0xdd, 0xe7, "5906a1aa06e2ef378d436f008515cf37d11e514b3f6c510f9d6ae0acc49a98b382433ebc2e9159323bd11ed82002d2cd6ed49f0790a9aa0f46dcdcafa8fbd0e3015d7ddac9088f7a9caaac72558e7bb2e758dc82cfe92e98ff40cd8cda318d427aefbaefca476973ad9515d4b7599449ac7fd294ccbfc02640cc55c80347f3dfa5dcc3d98a2665f7bf997a9ee98a598b7e3c8948007eb4f15ebcf87f02989cf5fa4a7bdbeb0bb8fbff32821d7bc4808184918b9a6fa6b5d7cbbac7931760c2d82031f4e7af922374a7001387a22ecc588e2d493d689cef6389e7c8aed74697fdcd8dc5563e1bab"}, {0xdd, 0x80, "9a89fe2ca0442a002f13222a688352d4145319488624edb36e9bafc1322d119a0a238a038f748c7a4ededa4aa54fdccf08f81a8fbf2863f69f9f84b37c549217c0e187772bc335bf98df412fed27035ab1ff935b61bfa6ea6dcd9a474d3306a969a6bde57f857a92209ab3e104b929182194dc8e4292888c77c0e1dc9d44d544"}, {0xdd, 0xe2, "258c9dba9898a0163eb1ca8806a7b0088c3c4328e3c9da69fb39bec516455aa7ed86d51e847c8227acb6359d154028756ed14d82981d60dd3f9a0b8a70578991b08dfa8da69440d7310b0ca68db9e9169d58febad209e4f847a5e54e0e485fa4bc73c819ca543e965afda926733fc15fe1528ec4e176f0344ac66485ecf96928627192044cd4fd67ab49b009477d2473b9e4bdab188a99d674c1431458ad5524124f609194ab496255182190f2af04c1dabb82a703b98cdf06e656e7d5b2ffc1fc391236e156bd8f6a1c6123c4176b4e56ff497e5efdb3260cf6a55ff43c7a169df2"}, {0xdd, 0xb9, "fbeeb2176e815fb29ac937a66dd88c1c3d277ca21992fd9819a6aaabc613b1dad7b72d33ec3aaeb6f1e275b1d90fe0f954c7317071ec9ca7dec7b3db5aaa18c8eb5a84140a809aa2c6ee5678d087329c5f458ab72652df4a8796b6f120b9a65e1bed490bd8994b57fc31ba1ef208ea48965f8741a5b8a2bc627042aae7057d8c67d5a4b96de5b2a3d74ca6979c18a4dca3df65fb52bd42a111294bb86cd1cb4e29776ee93b25207d6cfb02c5586cdd7f27bf081fa749e38c65"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6003}]}, 0xa04}, 0x1, 0x0, 0x0, 0x880}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00bf51286b2560cda7af2079000000000000000000", @ANYRES32=r8, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r10 = socket(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000900509b0ccccf83"], 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r14, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000f40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c0000002d00000325bd7000ffdbdf2500000000", @ANYRES32=r14, @ANYBLOB="050000000980f6ff0000100008000b0004000000e5ff09fa9e1d79e0c8370cde146f62f4e417a06b02653046bbee32634e49997a21505d483e2849458d1972d2695197219f506bdb9e17096c5ff66749f4a236ee29648f2471d61a3bd1b78545010a9307054529537e5875d94647fae79b62c8c15489a578c4aeb7602a3fa83301240f194bb22f13a81999d1c0a99d277cd7fe6ba289d3328cd1d29de6e06bbf5e1f2cca90eab67c4d457d02f9a22eb0349fd508b4fd40cc938e56a2ff8122fb652fc264a68d08"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r17, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0xa00000000000000}, 0x0) 00:12:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x50, 0x0, 0x800, 0x0, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0x4c001) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x50, 0x0, 0x800, 0x0, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000041}, 0x4c001) 00:12:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xc37a}, &(0x7f0000000040)=0x8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002000800000001000300765a20d3c49afc2e446d487c3385e0073bbfd5a6f7737d47bd7c2d73e63b9392ff62b084acae4911485fc700ada99248cf680a689d5ecf33257366c94831024e47d7c526aaf4ffdf05dd7e8bc1ca969d15c0985699d18caa528f82e202402e0ada02d0fe2bfc4d1635955c0d0351751729f9072d3c26860000000000", @ANYRES32=r1, @ANYBLOB="08002600000200000800570000000000e1540bb99513"], 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = syz_io_uring_setup(0x3aa4, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) r5 = syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000080)=0x8, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000780)={r7, "588a3cbe9b462a1364e4c8536b9d85ac"}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000009c0)={0x0, 0x2, {0x5, @struct={0x9969, 0x3f}, 0x0, 0x8, 0x1000, 0x3f, 0x8000, 0x9, 0x10, @usage=0x1, 0x1, 0x9, [0x4, 0x4, 0x3f, 0x400, 0x1]}, {0xffffffffffffffff, @struct={0x40, 0x81}, 0x0, 0x88e, 0x3, 0x8, 0x4, 0x2, 0x20, @usage=0x9, 0x1, 0x8, [0x1, 0xffff, 0x1ff, 0x7, 0x340000000, 0xe631]}, {0x3, @struct={0x0, 0x8000}, r7, 0x5, 0x3f24, 0x9, 0x5, 0x618d, 0x0, @usage, 0x8, 0x133, [0xffff, 0x5, 0x4c25762, 0x7, 0x8000000000000001, 0x1]}, {0x10001}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg\x00'}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000004c0)={r7, 0x0, 0x8, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xc37a}, &(0x7f0000000040)=0x8) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000002000800000001000300765a20d3c49afc2e446d487c3385e0073bbfd5a6f7737d47bd7c2d73e63b9392ff62b084acae4911485fc700ada99248cf680a689d5ecf33257366c94831024e47d7c526aaf4ffdf05dd7e8bc1ca969d15c0985699d18caa528f82e202402e0ada02d0fe2bfc4d1635955c0d0351751729f9072d3c26860000000000", @ANYRES32=r1, @ANYBLOB="08002600000200000800570000000000e1540bb99513"], 0x2c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) syz_io_uring_setup(0x3aa4, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000000)) (async) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) (async) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000080)=0x8, 0x4) (async) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000380)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000000780)={r7, "588a3cbe9b462a1364e4c8536b9d85ac"}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f00000009c0)={0x0, 0x2, {0x5, @struct={0x9969, 0x3f}, 0x0, 0x8, 0x1000, 0x3f, 0x8000, 0x9, 0x10, @usage=0x1, 0x1, 0x9, [0x4, 0x4, 0x3f, 0x400, 0x1]}, {0xffffffffffffffff, @struct={0x40, 0x81}, 0x0, 0x88e, 0x3, 0x8, 0x4, 0x2, 0x20, @usage=0x9, 0x1, 0x8, [0x1, 0xffff, 0x1ff, 0x7, 0x340000000, 0xe631]}, {0x3, @struct={0x0, 0x8000}, r7, 0x5, 0x3f24, 0x9, 0x5, 0x618d, 0x0, @usage, 0x8, 0x133, [0xffff, 0x5, 0x4c25762, 0x7, 0x8000000000000001, 0x1]}, {0x10001}}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'pimreg\x00'}) (async) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000004c0)={r7, 0x0, 0x8, 0x1}) (async) 00:12:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) accept(r0, 0x0, &(0x7f0000000180)) (async) r2 = accept(r0, 0x0, &(0x7f0000000180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000011c0)=ANY=[@ANYBLOB="98030000", @ANYRESDEC, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYRES8=r2, @ANYBLOB="c9f4434ad08ddf29b5fd783a00a20e34b9ec49038975a96a4a19a6eab2081ee76d1b7d098d2d17b085fb444362c1d886c162d9105517d53ba0eb7f11b700da05000000b4af5516d6505ab585562e14f025df4ef735f9eff2812dcc82d549cc15135a09586f5bee2aa0950d358be3a2b0c3d9b20cc0ea140efd41631325e92b7dbd0fb9f41d27c207d191551e865a7f6d0b6054a0ccfabaee62946b1df839387d2ac58cf2208aedc7628cf93451f34ca222f5accba6817014616d20b5bef3455d167ea52072e045aae36e462e277f0fd3875bdb710cd5510b7b3c420acf10c763cb0ec9e02e3b5e853899a665", @ANYRES64=r4, @ANYRESOCT=r1, @ANYRESHEX=r3], 0x398}}, 0x20040034) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0xa04, r5, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x70}}}}, [@NL80211_ATTR_FRAME={0x4e0, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7f}, @initial, @device_a, @broadcast, {0x9}}, {0x7, 0x0, 0x3, 0x0, 0x1}}, {@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @from_mac=@broadcast, {0x8, 0x894}}, {0xf, 0x0, 0x2}}}, @a_msdu=[{@broadcast, @device_b, 0x18, "113e4deef16731dba4bd8ac9b79bfbc616bbe1cbc39659a4"}, {@device_a, @device_a, 0xb3, "a6066940c5810ffb913083ee221fd4b913d1b372ddc3bc18c98b65c3e2ed3783916be5f65c89c556d2a3beaf9ac9ca9bca7b60132f053ba4a57e867d9c37679c573e5609946494171bda64405c704049bcf62c457b85d6b301c3ce74b2f8a4ae117a189e34021adbb9d00cc44466e34a9d764a4b2314acf90b7c0469c7cc04130f57d47c5d7d8a2fdcb6bde7fef0edfd15994a279b6bd85022bca783f8df0cc94a4865efb468f2bc9b8b565f640d73cf6b0ddf"}, {@device_a, @broadcast, 0xbe, "2e179bcaa22d91a5c8b614dd34326cd7d652cfcac34e93498211c1a02e721dd30d0f0dc1ce7f6fb4255a2d3ee061cc83a27e603148c786e0e7f6147f37e5ac3d9f2fab061c7e1e9ad10261a701ae5d8c241154800128defb0933728ecc4fa975dd59ecd9c5a206da3e1d1b74c723afdfe667ea78014fb47924d663880271e3389144fbdd8e7f9f05ef1d41c0fe83d5d58c13bbc81ddbaf6359ace093776242c19e9adb7a7eb4ebce304c2b7bbee9410a246f7e500f9688403f67b5f9f42c"}, {@device_a, @device_a, 0x85, "548be49efcbe0deb7fd7de63ab43bff4b8d2ff8fe457f1eecdee877635a62dc1273321cf19a14eba2ef35511800988708feba4cc604aa9d10d737b5e132cc9603fa3754a28018cf09ff6243ba63d478c6c49fbe8392edd2f6a16704c17764a92d4a2658afbe647d9c007f3b3fb5c6d9fe1076ee84fc9e97e22d33b39b2549b1208b3fc3247"}, {@device_a, @broadcast, 0x44, "52cf9685347d3aaf5e0d219e59c0ac1a1cfb9e5534f03aa88958f9d19f52ab9eeee686d58955f4648433cd8c7f934e8ad86c7039bd1826c65232b25b805dee75c7505fd4"}, {@device_a, @device_b, 0xa0, "9b184857a0ebe3577bdf4f996be6b877a8488e5569c3eda514875ed4f12189fe99536effa0e4be083e7b020b968a32613e471919ab255d1282ba821d93ed34ef55ae39c73a6efeaedd1a0751c145715409672b3c9548f861531b8e5181910184a36119d5987a00a9792bc581cc56e541e4487a71c4c2704275963accfcd624840a5895c678d73bc30bd035b1b94bf6331600fc4986b1abc894fb7cf32c077ad2"}, {@device_b, @broadcast, 0x7f, "91005b72cc041e191522dae67bb19a124e6dd63b2ef54edff1726dc16f02b31597ae8b340d8dc49dcf47dddcf0b3e9556e9de04d89d374a704bbfef61ca17ce361f2d9100bba94e49717c3e3f4e7f2e7acd22feca4ef13b81d496e8dd9139a5194dc265a738efe034bc93c1fb9b3195a0192e505d96b73abbf66baa0874497"}, {@device_b, @device_b, 0xba, "f5befc3b2ddefb4fa0a02dad1cbc58862bed5ae872800234b0f2c13ef00fae608366f213628fcbc36ef4b328e47b2efc32b2ef94647d0e8e2fb9cb85e976db70c496dc2deb5d0b80398f304921c3f6be93bb36eaf14ba7f5d86c88bad97abb656ec1866952506108230616a2b2f7af1a26b614f5a6721ef6c3fb57ee3853a0333fc9a1a9b5533a9ca2abf4d5cbae85556df3d58c8fa800c6a646c65a6b20c2e9354e5abfae1f94e8b7e9718fa3b48ed2c7da4ad551091943c616"}]}}, @NL80211_ATTR_FRAME={0x4f4, 0x33, @mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @device_b, @broadcast, @initial, {0x0, 0x3}}, @ver_80211n={0x0, 0x0, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1, 0x7, @random=0x800, @void, @val={0x2d, 0x1a, {0x40, 0x0, 0x1, 0x0, {0x10001, 0x5, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x7, 0x2}}, [{0xdd, 0x5c, "e53df28634df368d3e1ff1df1a578740b7b75cce5010b0a68c342e07d63a17c7285eee38ed3630b5f44ece1a223ab7d7defdbb818d50cb57fe813275a2e274eae50e20b88b1cdb62377f701b5695d2a49e404cb0e966de7799a3fd8c"}, {0xdd, 0xd3, "3d2f43c260a442c4891909a9592b25814d39730f03837a5500dab2912b813c55a085005ccdd01fdfe0bb3b5eedd87c982d92b6a488f6638dc90e3d83b59791c31cd818fc2aae7b77e76938b317d5a41fe35f0cb4153c44dd0d8b4b5a10781da8e526746a601458129a33d5e3aedf364a08d52e7afd9fd67805dfe93ee13edea0be4e218fd0a655a6add78447f4f71ae0d7953f1b5698119a9011aef45e98ac4ac4fc460054aa8d8666f822947e394d77585dd8fe3076438e9710a4120541a9234aaeab6b85b2cb3fadd83f24c26c5349a6f6e2"}, {0xdd, 0x73, "6312a07a8a2bfb067f4637106d2e04a251468aeabab81d67ed8a69c25197db9105d840d1f806d96da7f7dbc7a557ef62e115f99e50b7f232763f3e002b9bb198f8e3f7c8e2aa530e7e601df0e568e5ce31ffab6dce881dba293d1b47cbc7b738f1e1c91609961d9bf71080e57c27332babf15f"}, {0xdd, 0xe7, "5906a1aa06e2ef378d436f008515cf37d11e514b3f6c510f9d6ae0acc49a98b382433ebc2e9159323bd11ed82002d2cd6ed49f0790a9aa0f46dcdcafa8fbd0e3015d7ddac9088f7a9caaac72558e7bb2e758dc82cfe92e98ff40cd8cda318d427aefbaefca476973ad9515d4b7599449ac7fd294ccbfc02640cc55c80347f3dfa5dcc3d98a2665f7bf997a9ee98a598b7e3c8948007eb4f15ebcf87f02989cf5fa4a7bdbeb0bb8fbff32821d7bc4808184918b9a6fa6b5d7cbbac7931760c2d82031f4e7af922374a7001387a22ecc588e2d493d689cef6389e7c8aed74697fdcd8dc5563e1bab"}, {0xdd, 0x80, "9a89fe2ca0442a002f13222a688352d4145319488624edb36e9bafc1322d119a0a238a038f748c7a4ededa4aa54fdccf08f81a8fbf2863f69f9f84b37c549217c0e187772bc335bf98df412fed27035ab1ff935b61bfa6ea6dcd9a474d3306a969a6bde57f857a92209ab3e104b929182194dc8e4292888c77c0e1dc9d44d544"}, {0xdd, 0xe2, "258c9dba9898a0163eb1ca8806a7b0088c3c4328e3c9da69fb39bec516455aa7ed86d51e847c8227acb6359d154028756ed14d82981d60dd3f9a0b8a70578991b08dfa8da69440d7310b0ca68db9e9169d58febad209e4f847a5e54e0e485fa4bc73c819ca543e965afda926733fc15fe1528ec4e176f0344ac66485ecf96928627192044cd4fd67ab49b009477d2473b9e4bdab188a99d674c1431458ad5524124f609194ab496255182190f2af04c1dabb82a703b98cdf06e656e7d5b2ffc1fc391236e156bd8f6a1c6123c4176b4e56ff497e5efdb3260cf6a55ff43c7a169df2"}, {0xdd, 0xb9, "fbeeb2176e815fb29ac937a66dd88c1c3d277ca21992fd9819a6aaabc613b1dad7b72d33ec3aaeb6f1e275b1d90fe0f954c7317071ec9ca7dec7b3db5aaa18c8eb5a84140a809aa2c6ee5678d087329c5f458ab72652df4a8796b6f120b9a65e1bed490bd8994b57fc31ba1ef208ea48965f8741a5b8a2bc627042aae7057d8c67d5a4b96de5b2a3d74ca6979c18a4dca3df65fb52bd42a111294bb86cd1cb4e29776ee93b25207d6cfb02c5586cdd7f27bf081fa749e38c65"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6003}]}, 0xa04}, 0x1, 0x0, 0x0, 0x880}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00bf51286b2560cda7af2079000000000000000000", @ANYRES32=r8, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r10 = socket(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r13) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000900509b0ccccf83"], 0x48}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r14, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000f40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c0000002d00000325bd7000ffdbdf2500000000", @ANYRES32=r14, @ANYBLOB="050000000980f6ff0000100008000b0004000000e5ff09fa9e1d79e0c8370cde146f62f4e417a06b02653046bbee32634e49997a21505d483e2849458d1972d2695197219f506bdb9e17096c5ff66749f4a236ee29648f2471d61a3bd1b78545010a9307054529537e5875d94647fae79b62c8c15489a578c4aeb7602a3fa83301240f194bb22f13a81999d1c0a99d277cd7fe6ba289d3328cd1d29de6e06bbf5e1f2cca90eab67c4d457d02f9a22eb0349fd508b4fd40cc938e56a2ff8122fb652fc264a68d08"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000f40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c0000002d00000325bd7000ffdbdf2500000000", @ANYRES32=r14, @ANYBLOB="050000000980f6ff0000100008000b0004000000e5ff09fa9e1d79e0c8370cde146f62f4e417a06b02653046bbee32634e49997a21505d483e2849458d1972d2695197219f506bdb9e17096c5ff66749f4a236ee29648f2471d61a3bd1b78545010a9307054529537e5875d94647fae79b62c8c15489a578c4aeb7602a3fa83301240f194bb22f13a81999d1c0a99d277cd7fe6ba289d3328cd1d29de6e06bbf5e1f2cca90eab67c4d457d02f9a22eb0349fd508b4fd40cc938e56a2ff8122fb652fc264a68d08"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r17, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000eafb13bda65d82f975498de63c47198de8f42edd9f67d367b89d7e82f1fb40d77e07da89b24bce97b6f9d17e2d5f73a0c5e6101d252a7ddc3eefc34213ec6023d25acae8270da0da82da13fbf1572a2c4fcd586fc7cc163746bc14aa14e80aa4feed547f1b022e0eac89f7498733e80dabcfcf3518fadbbfd87d34cb8119148e0c0f1cbb04f2bd2dbc9f180002e9ffdbdfec7ad2020bc46bd250e5f479b7e970c84e98a9c5db5871efaab3fdfd71909e6476a7444746af29138404eda39c0600388321292b02d74b5ffaf9", @ANYRESHEX=r0, @ANYBLOB="050000000000000000000600000008000300f9d19dfa92e1d9206896b6cc08cd208b29703133fbb2b8a1", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:12:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="84a652702e05128e37021dddc3a2843d680f67cf65c6d4ec8a75f76b60ba58a01693573fd5bcba61e3"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) (async) write(r2, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000eafb13bda65d82f975498de63c47198de8f42edd9f67d367b89d7e82f1fb40d77e07da89b24bce97b6f9d17e2d5f73a0c5e6101d252a7ddc3eefc34213ec6023d25acae8270da0da82da13fbf1572a2c4fcd586fc7cc163746bc14aa14e80aa4feed547f1b022e0eac89f7498733e80dabcfcf3518fadbbfd87d34cb8119148e0c0f1cbb04f2bd2dbc9f180002e9ffdbdfec7ad2020bc46bd250e5f479b7e970c84e98a9c5db5871efaab3fdfd71909e6476a7444746af29138404eda39c0600388321292b02d74b5ffaf9", @ANYRESHEX=r0, @ANYBLOB="050000000000000000000600000008000300f9d19dfa92e1d9206896b6cc08cd208b29703133fbb2b8a1", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:12:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0xf00000000000000}, 0x0) 00:12:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = accept(r0, 0x0, &(0x7f0000000180)) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000011c0)=ANY=[@ANYBLOB="98030000", @ANYRESDEC, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYRES8=r2, @ANYBLOB="c9f4434ad08ddf29b5fd783a00a20e34b9ec49038975a96a4a19a6eab2081ee76d1b7d098d2d17b085fb444362c1d886c162d9105517d53ba0eb7f11b700da05000000b4af5516d6505ab585562e14f025df4ef735f9eff2812dcc82d549cc15135a09586f5bee2aa0950d358be3a2b0c3d9b20cc0ea140efd41631325e92b7dbd0fb9f41d27c207d191551e865a7f6d0b6054a0ccfabaee62946b1df839387d2ac58cf2208aedc7628cf93451f34ca222f5accba6817014616d20b5bef3455d167ea52072e045aae36e462e277f0fd3875bdb710cd5510b7b3c420acf10c763cb0ec9e02e3b5e853899a665", @ANYRES64=r4, @ANYRESOCT=r1, @ANYRESHEX=r3], 0x398}}, 0x20040034) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)={0xa04, r5, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x70}}}}, [@NL80211_ATTR_FRAME={0x4e0, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xf, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7f}, @initial, @device_a, @broadcast, {0x9}}, {0x7, 0x0, 0x3, 0x0, 0x1}}, {@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_b, @broadcast, @from_mac=@broadcast, {0x8, 0x894}}, {0xf, 0x0, 0x2}}}, @a_msdu=[{@broadcast, @device_b, 0x18, "113e4deef16731dba4bd8ac9b79bfbc616bbe1cbc39659a4"}, {@device_a, @device_a, 0xb3, "a6066940c5810ffb913083ee221fd4b913d1b372ddc3bc18c98b65c3e2ed3783916be5f65c89c556d2a3beaf9ac9ca9bca7b60132f053ba4a57e867d9c37679c573e5609946494171bda64405c704049bcf62c457b85d6b301c3ce74b2f8a4ae117a189e34021adbb9d00cc44466e34a9d764a4b2314acf90b7c0469c7cc04130f57d47c5d7d8a2fdcb6bde7fef0edfd15994a279b6bd85022bca783f8df0cc94a4865efb468f2bc9b8b565f640d73cf6b0ddf"}, {@device_a, @broadcast, 0xbe, "2e179bcaa22d91a5c8b614dd34326cd7d652cfcac34e93498211c1a02e721dd30d0f0dc1ce7f6fb4255a2d3ee061cc83a27e603148c786e0e7f6147f37e5ac3d9f2fab061c7e1e9ad10261a701ae5d8c241154800128defb0933728ecc4fa975dd59ecd9c5a206da3e1d1b74c723afdfe667ea78014fb47924d663880271e3389144fbdd8e7f9f05ef1d41c0fe83d5d58c13bbc81ddbaf6359ace093776242c19e9adb7a7eb4ebce304c2b7bbee9410a246f7e500f9688403f67b5f9f42c"}, {@device_a, @device_a, 0x85, "548be49efcbe0deb7fd7de63ab43bff4b8d2ff8fe457f1eecdee877635a62dc1273321cf19a14eba2ef35511800988708feba4cc604aa9d10d737b5e132cc9603fa3754a28018cf09ff6243ba63d478c6c49fbe8392edd2f6a16704c17764a92d4a2658afbe647d9c007f3b3fb5c6d9fe1076ee84fc9e97e22d33b39b2549b1208b3fc3247"}, {@device_a, @broadcast, 0x44, "52cf9685347d3aaf5e0d219e59c0ac1a1cfb9e5534f03aa88958f9d19f52ab9eeee686d58955f4648433cd8c7f934e8ad86c7039bd1826c65232b25b805dee75c7505fd4"}, {@device_a, @device_b, 0xa0, "9b184857a0ebe3577bdf4f996be6b877a8488e5569c3eda514875ed4f12189fe99536effa0e4be083e7b020b968a32613e471919ab255d1282ba821d93ed34ef55ae39c73a6efeaedd1a0751c145715409672b3c9548f861531b8e5181910184a36119d5987a00a9792bc581cc56e541e4487a71c4c2704275963accfcd624840a5895c678d73bc30bd035b1b94bf6331600fc4986b1abc894fb7cf32c077ad2"}, {@device_b, @broadcast, 0x7f, "91005b72cc041e191522dae67bb19a124e6dd63b2ef54edff1726dc16f02b31597ae8b340d8dc49dcf47dddcf0b3e9556e9de04d89d374a704bbfef61ca17ce361f2d9100bba94e49717c3e3f4e7f2e7acd22feca4ef13b81d496e8dd9139a5194dc265a738efe034bc93c1fb9b3195a0192e505d96b73abbf66baa0874497"}, {@device_b, @device_b, 0xba, "f5befc3b2ddefb4fa0a02dad1cbc58862bed5ae872800234b0f2c13ef00fae608366f213628fcbc36ef4b328e47b2efc32b2ef94647d0e8e2fb9cb85e976db70c496dc2deb5d0b80398f304921c3f6be93bb36eaf14ba7f5d86c88bad97abb656ec1866952506108230616a2b2f7af1a26b614f5a6721ef6c3fb57ee3853a0333fc9a1a9b5533a9ca2abf4d5cbae85556df3d58c8fa800c6a646c65a6b20c2e9354e5abfae1f94e8b7e9718fa3b48ed2c7da4ad551091943c616"}]}}, @NL80211_ATTR_FRAME={0x4f4, 0x33, @mgmt_frame=@assoc_resp={@with_ht={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1f}, @device_b, @broadcast, @initial, {0x0, 0x3}}, @ver_80211n={0x0, 0x0, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1, 0x7, @random=0x800, @void, @val={0x2d, 0x1a, {0x40, 0x0, 0x1, 0x0, {0x10001, 0x5, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x7, 0x2}}, [{0xdd, 0x5c, "e53df28634df368d3e1ff1df1a578740b7b75cce5010b0a68c342e07d63a17c7285eee38ed3630b5f44ece1a223ab7d7defdbb818d50cb57fe813275a2e274eae50e20b88b1cdb62377f701b5695d2a49e404cb0e966de7799a3fd8c"}, {0xdd, 0xd3, "3d2f43c260a442c4891909a9592b25814d39730f03837a5500dab2912b813c55a085005ccdd01fdfe0bb3b5eedd87c982d92b6a488f6638dc90e3d83b59791c31cd818fc2aae7b77e76938b317d5a41fe35f0cb4153c44dd0d8b4b5a10781da8e526746a601458129a33d5e3aedf364a08d52e7afd9fd67805dfe93ee13edea0be4e218fd0a655a6add78447f4f71ae0d7953f1b5698119a9011aef45e98ac4ac4fc460054aa8d8666f822947e394d77585dd8fe3076438e9710a4120541a9234aaeab6b85b2cb3fadd83f24c26c5349a6f6e2"}, {0xdd, 0x73, "6312a07a8a2bfb067f4637106d2e04a251468aeabab81d67ed8a69c25197db9105d840d1f806d96da7f7dbc7a557ef62e115f99e50b7f232763f3e002b9bb198f8e3f7c8e2aa530e7e601df0e568e5ce31ffab6dce881dba293d1b47cbc7b738f1e1c91609961d9bf71080e57c27332babf15f"}, {0xdd, 0xe7, "5906a1aa06e2ef378d436f008515cf37d11e514b3f6c510f9d6ae0acc49a98b382433ebc2e9159323bd11ed82002d2cd6ed49f0790a9aa0f46dcdcafa8fbd0e3015d7ddac9088f7a9caaac72558e7bb2e758dc82cfe92e98ff40cd8cda318d427aefbaefca476973ad9515d4b7599449ac7fd294ccbfc02640cc55c80347f3dfa5dcc3d98a2665f7bf997a9ee98a598b7e3c8948007eb4f15ebcf87f02989cf5fa4a7bdbeb0bb8fbff32821d7bc4808184918b9a6fa6b5d7cbbac7931760c2d82031f4e7af922374a7001387a22ecc588e2d493d689cef6389e7c8aed74697fdcd8dc5563e1bab"}, {0xdd, 0x80, "9a89fe2ca0442a002f13222a688352d4145319488624edb36e9bafc1322d119a0a238a038f748c7a4ededa4aa54fdccf08f81a8fbf2863f69f9f84b37c549217c0e187772bc335bf98df412fed27035ab1ff935b61bfa6ea6dcd9a474d3306a969a6bde57f857a92209ab3e104b929182194dc8e4292888c77c0e1dc9d44d544"}, {0xdd, 0xe2, "258c9dba9898a0163eb1ca8806a7b0088c3c4328e3c9da69fb39bec516455aa7ed86d51e847c8227acb6359d154028756ed14d82981d60dd3f9a0b8a70578991b08dfa8da69440d7310b0ca68db9e9169d58febad209e4f847a5e54e0e485fa4bc73c819ca543e965afda926733fc15fe1528ec4e176f0344ac66485ecf96928627192044cd4fd67ab49b009477d2473b9e4bdab188a99d674c1431458ad5524124f609194ab496255182190f2af04c1dabb82a703b98cdf06e656e7d5b2ffc1fc391236e156bd8f6a1c6123c4176b4e56ff497e5efdb3260cf6a55ff43c7a169df2"}, {0xdd, 0xb9, "fbeeb2176e815fb29ac937a66dd88c1c3d277ca21992fd9819a6aaabc613b1dad7b72d33ec3aaeb6f1e275b1d90fe0f954c7317071ec9ca7dec7b3db5aaa18c8eb5a84140a809aa2c6ee5678d087329c5f458ab72652df4a8796b6f120b9a65e1bed490bd8994b57fc31ba1ef208ea48965f8741a5b8a2bc627042aae7057d8c67d5a4b96de5b2a3d74ca6979c18a4dca3df65fb52bd42a111294bb86cd1cb4e29776ee93b25207d6cfb02c5586cdd7f27bf081fa749e38c65"}]}}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6003}]}, 0xa04}, 0x1, 0x0, 0x0, 0x880}, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00bf51286b2560cda7af2079000000000000000000", @ANYRES32=r8, @ANYBLOB="0800050008000000"], 0x24}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) r10 = socket(0x10, 0x3, 0x0) r11 = socket(0x10, 0x3, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) (async) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r13) (async, rerun: 32) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000900509b0ccccf83"], 0x48}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r14, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000f40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c0000002d00000325bd7000ffdbdf2500000000", @ANYRES32=r14, @ANYBLOB="050000000980f6ff0000100008000b0004000000e5ff09fa9e1d79e0c8370cde146f62f4e417a06b02653046bbee32634e49997a21505d483e2849458d1972d2695197219f506bdb9e17096c5ff66749f4a236ee29648f2471d61a3bd1b78545010a9307054529537e5875d94647fae79b62c8c15489a578c4aeb7602a3fa83301240f194bb22f13a81999d1c0a99d277cd7fe6ba289d3328cd1d29de6e06bbf5e1f2cca90eab67c4d457d02f9a22eb0349fd508b4fd40cc938e56a2ff8122fb652fc264a68d08"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r17, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) [ 745.979778][ T3326] __nla_validate_parse: 18 callbacks suppressed [ 745.979793][ T3326] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 746.051536][ T3333] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000eafb13bda65d82f975498de63c47198de8f42edd9f67d367b89d7e82f1fb40d77e07da89b24bce97b6f9d17e2d5f73a0c5e6101d252a7ddc3eefc34213ec6023d25acae8270da0da82da13fbf1572a2c4fcd586fc7cc163746bc14aa14e80aa4feed547f1b022e0eac89f7498733e80dabcfcf3518fadbbfd87d34cb8119148e0c0f1cbb04f2bd2dbc9f180002e9ffdbdfec7ad2020bc46bd250e5f479b7e970c84e98a9c5db5871efaab3fdfd71909e6476a7444746af29138404eda39c0600388321292b02d74b5ffaf9", @ANYRESHEX=r0, @ANYBLOB="050000000000000000000600000008000300f9d19dfa92e1d9206896b6cc08cd208b29703133fbb2b8a1", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000eafb13bda65d82f975498de63c47198de8f42edd9f67d367b89d7e82f1fb40d77e07da89b24bce97b6f9d17e2d5f73a0c5e6101d252a7ddc3eefc34213ec6023d25acae8270da0da82da13fbf1572a2c4fcd586fc7cc163746bc14aa14e80aa4feed547f1b022e0eac89f7498733e80dabcfcf3518fadbbfd87d34cb8119148e0c0f1cbb04f2bd2dbc9f180002e9ffdbdfec7ad2020bc46bd250e5f479b7e970c84e98a9c5db5871efaab3fdfd71909e6476a7444746af29138404eda39c0600388321292b02d74b5ffaf9", @ANYRESHEX=r0, @ANYBLOB="050000000000000000000600000008000300f9d19dfa92e1d9206896b6cc08cd208b29703133fbb2b8a1", @ANYRES32=r1, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:12:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x34000}, 0x0) 00:12:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f0000002380)={&(0x7f0000001d80)={0x5f0, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xaa8}, @NL80211_ATTR_FRAME={0x5c1, 0x33, @probe_response={@wo_ht={{}, {0x40}, @device_b, @device_a, @random="926625a14222", {0x5, 0x7}}, 0x20b, @random=0x83, 0x4802, @val={0x0, 0xa, @random="426bef5b28da09ef9591"}, @void, @val={0x3, 0x1, 0x9}, @val={0x4, 0x6, {0x0, 0x1, 0xa17, 0xff}}, @val={0x6, 0x2, 0x7}, @void, @void, @void, [{0xdd, 0xb5, "c8d5128bbf77a6295b503c696cd965bb68838ae022982d1ca988f4d713a422dc1abadd23ebbe35a8051cdf915b4870abb46bb22bf5d5b9472a5ff7e9cd7013b5bb77e899d894ac22501cc83767fba9e47162af143721be4be76e25a80bf8012d1b4ea72fec616fb7202f595241711b2a09c14624c471e55e84ebe13d9eb94b398fff9f8b81c72abc629e520bf9512f2e015370558a1d86d2d0305f680f2396f85f24c81f1d2daa8108b35891c75bcd1a257e092c7f"}, {0xdd, 0xba, "6ee9e2bd5c0df478a95c7bc558028547f062a9f3911f8978a2b0ba2b091fc09dd1f3734bce4a91073e24cb35336aea5a3c59b830079c26f869aa7b2b169dc4f9c05465e8817b3e95b6282556985a5cb25751c17b2fa4378ccaca5be9686c603ac7178a2e226d5e866db3f3aa8184dd9c6ca0fae868ac082fc80944cdf2d9c79c01da6d5b412e751c78e1822a03d45b28ec91a92967b5aa763814e964b66d929ebb1d2b2a7cd387c528a126e8e50115e361f7fd722910188ca3f8"}, {0xdd, 0xad, "ceff9ec5c811e80cfa34b9fe612aa6252ecb8de0db9a065832c85f368aa8160038f97eff0314ba73f0615f95d0e84f47f78bf9b385ea879a5b5905ad9b470659a72c2a5f7026939ca242bd8525f7a14dd2f8232de3a80d2949a01ba0d41b44034f3781104e0d5eaece1acf02d9c1671f32bbb3724bfa250c679642bbbff322c89a8f8c9c5e2cdae90d44ae65b560f68b772b5bd21eeb016db65d7df5168783fe0a7595a3f82208a3f850dd280c"}, {0xdd, 0x96, "9046692a5da864e1b8107dacf528844bb54fc1fdbb57a289e19dd069843c58fbdf64d836edd0e302246dcaa0ee782a7f03d44a90ba62e9fb2aa0734b4ba0a9dc5c96edeef7879803e28eef49b2814881131dbe6b55ce11164cec3247811bc351047605bba45a6c307ca6e925b18c207bdf75f6edd8c467776be784d71e2481abad5a4a9ac73a7bb61cd4d3c245e5207106437367d92d"}, {0xdd, 0x5e, "89755354ca3468c95f4d59b8c26704b8cd4c7fcc49bc1333317d0e0f2147c77482301b3f5f9d0c2e0c991f635906afddfc1b23722f4b84a5048ce4d1b30a48a35ff56784de114f721b983ff5f0f336b627692c6ee1dfa2b2889a45b4dc47"}, {0xdd, 0xe7, "07d970dce085845266f74cebb4272d70f38de2383e6a042e185d9da876ae72c04fa2782a5cee36108b1bb5eb5f3eb0da067be5b053f6bfd8252c9cd6525e41b924f3c6451084dbb52b9b5135928d33b66a3da73408153d975e047926aa056268fca23c5d03cc5faf8a5f653d36bd1e7bb53b8c4f0d9c19a177df28009b9ba5991ecaa8db90f4d607618897012b1c21e12099c083dbee3e4b1567c6f2b74e3de2fc74e82dcb2286eaa46a654b570598282d6d2be79a02686725166aa0ce623871ccadaa726feadfc01258a915797a8fd4b9bbc35660d505ad0b9d341ecdf6103d92ec0cc277430f"}, {0xdd, 0xd3, "ce584e65a2a80d91af8b38b97c9c7b0865888c967874ac8f240f2fb29ad6b57dedc10590af7ed0dbf5b5df30bc0563b404aa9a8241fc73cd4e49577126b8a06458c2b5de45b57c0e969af3f67ec2acea4790d56c825f3fbbdbdc3bca211bab43189d4409bcbeaf3b7b4a431bfa705923be5ad98ade10de7772f278995ba7c1bbadde086315e014f1cbc1a8b81b21ac45b707c7185befe53978e44bec01f1d865af0c02c008703a0c42d25b94c821981beb80fd55bd942d6b39695f38842c3a0def5ef59add2d2caff630aede404555fa397762"}, {0xdd, 0xa4, "6fae89ee399f786d22c970d7d14a0822967d3acaee4f60d6adeb1c108ce56214acd8df45020d2f4f48d3d7afd4eacbe3ffd7d22c347e868306913fc4d8ebef18fc625ce3f40119caf634cacd8c4463c4f478d9e12362e417e4c59f35887a13e099103b93c10e3c5625c60e0a5a787f5d20e6fc9acefd75b29c7118620b583e3b1c00eda8ea65121601a1da3bc68c94ec8cad9dbb7eee53bc605f205faca738c39820175b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x5f0}, 0x1, 0x0, 0x0, 0x40}, 0x20d4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x541b, &(0x7f0000000040)) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f00000012c0)={0x1, 0x5, @status={[0x7fffffff, 0xffffffff, 0x7, 0x5, 0xaf, 0x81]}, [0x3f, 0x8, 0x579, 0x2e63, 0x5, 0x5, 0x400, 0x8, 0x48a, 0x0, 0x7, 0x20, 0x9, 0x2, 0xffffffff, 0x101, 0x6, 0xcf, 0x3818, 0x7f0, 0x5, 0x800, 0x8, 0x10000, 0xd7, 0x1000, 0xc7d0, 0x88b, 0x3, 0xe23, 0x61ed, 0x100000000, 0x100000000, 0x9, 0x0, 0xfffffffffffffffb, 0x9, 0xc0d, 0x1, 0x9, 0x8000000000000000, 0x1145, 0x7ff, 0x40, 0x2, 0x194d, 0x7ff, 0xffffffff, 0x9, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0xb9, 0x1, 0x3f, 0x8000000000000001, 0xe, 0x2, 0x0, 0x7, 0x10000, 0x9, 0xbb]}) write(r11, &(0x7f0000004200)='t', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f00000002c0)={0x0, 0x0, "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", "599af2d4d231914660d5710dc2af234ebf710449160f3118f4ce23699940c0752a93ea17f280dd7d4fa7d29df60bf3c354b14f0ae15a330564289c7b493252a76b8b8d2845c9445e053945890c88182930af6b607475fc29e54fa596ec43c1a8c20c4b97dbc583bde4c6f284ff01eeb554cf914a74bace14c7dd9517b1670b6d21630518c1f410374e22fe3a15a5d3b2682549f887df21c6cdd341aad4c7c1ce2c478e174723d6bdcf6f8bface177f49f1a9f8a04cbd5b8c2ef4ee5ec35543984ac3ea7f10ffcb86a5623c7f59601132060635ab37af733c5a50cf74093d905883945edb669d181857be262bf5dc898cdb3f54c1bdc79e12070d38faeb0415325a8bd731bac7b8c0bc4f53b3353e69e9a2d4afa2ca7c08ba00732e84380cda2379c8ef7d1e44c3a3edd04f11b1b8f1982ca3d6f732fdca32df827e0f91793ba45d4b89efb771af48292e334ee0d40ffae934d9b13b718593ae3396699fb0097934bdc6a1ad82051211f1275f40c3f0751b1394b9425236424442506f754da0ce8fb1cbeaaad27edd4017ace6cc22c887b95dc295acd5ac718bc839acc040f47cf23b52846c2a6948774d99ac5c20a1a99a70af6adb0ce21fc56c7213541381715b1a6f1047673cb9792005c1b774dfec34235b7bd9db4f42e6113f1e9d731c84991d594e1bed1b3b7fbcc289d22a7b39c73093403e19ae93c17b9725ddc32bdafa20aa49ce46fa4f2f7766d8883cf675aedeb3233128f9b98ca63204d0772fcc3788965d780e53e5d535766b0f233898aa3533ec4cb37350af2c2617b39f4f1b2d5f378f288286a0bfbc23729146a1302c4e87963fa276fdfc51800b8537bb6895dc08ace2ccb7e56820415818c3fec8eb3907ddb0df9afae1345bc0a001391b09062a86391fcf86e917e0477b6811f57fdebcad44ddd8e305dc92f5181fca33124686075ff034b2aad1524535d86a242c5e9bc6f968544e971ce386f01ec963b5e6088a305ec9c6e6b8f0711442c8d541ec65e4ca157b03960f37b629c2e1004f3a3c1c6fe9139d64e44b54c3702685a9e215e12e3cb4e90ec166975194f8a8805548da6414d77e034c76663c5d0c1c84f3c0f60629d229441dd6292dccd44039985ec323fcae9e1cc8258c64e1a935d26c33ce0dec4bad36a5a980a99f7bbc2c09119a8a65cccb0ed6581bf43d2c2b5b8121f557c6958dadf7b60e76a678fcbb0380425ef862334d5005b54aef215d3d447ed328ea87b85896a47964f3e67891dbb62522748288ca30460c79919966bee0fd5c830452af08672672c0b70c6f4109cd731ef4260211392a72ca281ab367ecf8c178e583e3e6413af2f53f529ee2f3004949ff7b6540be7c244ae094e5764a9f4bdc66a00e09372766bfb51157870dd60fb648f3bb1a43f504d9f1499b5e12d0e8f21c5b9f659e910c94b8ed19c0fb67820b98842b36a86dc3b7f23d931930c024e647349ceb7560cb79becf6737f403085e43e24c4949de8d9e0cb809649413379f723f95af5be6c300816642532cbb4fbc2927cb6af82e7baa25d843ecc0494fb439f98d46a6fb36df1f18274b05cbef3b5116c40514cf3f4a6c1c27db6f26b16a57b2eeda7f55d52d79bb58e6d4a2f6e17cd05deecf02b39c9d8b91adc4c803d995c432b4f148f9acc9acc7c6f66f26df0aa4116b2bdab7b862e739bdc8a00d1595f123539145b0aa8590af8f7098da8d30caec03279953b5f4073ed7e9d0b128e4f95c999b7f1c2584fc9deba0d0d96bacec8a25e97ea2cfd1aa913643ba1bed8e2bf997ad380e23a3255ce2e41930d826ce0670b8e3c6e4ffdc19775bc260eb5fe71c471a2f5ee28155f37921bbf083b00e1a54dce7740d429410549cd8ce1dd947795c80000850800d0844a0b08321b310a37afbb0a93326060f25680dea8b7012358cd08f800fa3cd5999359aae638bb7fcdabd0c3893eb3c9d1a0cfcd2190e7a5ae1db3efc0b1fad55bf39334aae19f6ceb6ff0cb9b7d6ae8dc41aa2b0e22d2906029750ac531859b89abe5f5268a560d2080d0d3d37d8f40749e7ebc6ec74975208223a505e315fa33c3e0afe0577c83e7458478f9fcce3cef40e44c1c515e92382a7a0fd479c6c981a8e0ff225aa6cc48de0a8f8aebfeaba7ee8fd54debd5bf5f24c5b3e59dc40eb9a04b6d80f14903d33c22003363e568d48daa592155c0ab447abaad905379dbf0c77a40b5f66c527dac43e793f7666cc3d186c985624be17517c42a72a1f991b1d2bac8e17119562bc5184d9fa991b6b1a1488a39f7d5276410b074561213fc60b8ceb1982109b49defa9447724d36e689595a81f59728a3723a8886f6625374911e155a15fc5bc3a4c069dd09c42911e9d371d2bdedaea62a9dc30c3a1d1901ba80695fd90af893ff3113fad12b5b4678e40d138b6133a7780343ec5d4f00400d14d7271803399d67d86285bd7b583a1263ef7556b766a2bec92e74085a24caa29704263d9572d7f2855b3d9bd22d1a5de291e888e9dd21b6d6d954c15a86b0b1ee0edc5e82cec621cc0414a14115feb43a11cb6e0137e4ce7873cb89c7eee6fde1b433c3df480ddce1fe5fcd0d7575a9dd28ccef59c25fc359e163fd3b14516d0ef2d84443afe401cf1f1279d4b0cf5ed7479a1d430a2d0ff560a77d1ff6fd4f344561ca6d83c32e25d2ec443e3bb721cdedd679692de3630d5876c8c840b0084549dd3103b17d7f59af96c88a73a71169ec33345c75b743a4c9b95d16cc6db29a579386cd9128a1da47f732412d3f6ac76af5cfec4084648eb2239e9f85f47b1392719f435d0e64853cd7d79aec1a4d09e6f035935d1b79a6d56da56ad0187445ad9e8e4c861da2ca82e54bb7e8e9e54547e753679c756f4231ae56f48bc7d9bc35f98ee9bce62ec313112db662d0989cb5fb51f6d5d7e95c1d624500e4513cbf3917433740ab3c150712976d96e2f442a37a48ac03cbb57ddf46fb3aa69003b8d04d775c1e503f6b528f22e8f6923a6a62d095a038a1305d0e79eeb9c04bd314b057aead803df02ff997e6d4ac3fd7f4c65abdd422cb6fd8fed824e1fe472ec6d84c3d3f9107a7a18798ec2f957ec975dda002f01b03f9c201d9b561a591d3bdf80344c9be3209c77ec3537982e6813a3df610d943d333a91fa918720738cb56e1ed066a361e7ff9d62470d4860f4ed6948808c7e6cf48ed0b32392b0e7e396263fcec915602dbe284de31ce7bbaece6186a8c3cf2b0ba65d7bd0264b9a3694ea421f24bfb9ba7823d03dab23a04ace7d0c15bc29134e972af71612df76fe46fc3cefe8a933daf4be2dade9d3af7b52c348fcfaad9fe756a8a106dbb373879f968e10fbb83f55111ba7a182954047295a15937557dd42619bf13eaa999a7814947c15364665a6e3471afba03b87485e5e01f58e6914eb663fb825fd4baaa218c28893a06e2feac6d37cbe59a57a7255793c8a6009e5461890585d30180028cbb4d22e3b1d41cd218d47aad663104691a5815474ff7ce28696ffbe24977d11ac79c0764949c72f9069663e853292905b82d5a56334e992cd8709fedb1848e5497b4c68bba446629f783d3bdadd31fe82695975962489aa7a49be1f5fe3b2e5443799e381e65948b015d0afe2fa4246ad444730d32d0602a59a6dba260a7b6173f586f04b8d1f6ba2649870b4e484578cb60f9615ca60ce385b98744afb6af3c62cbc3db56c77cc9f750d5c856a41c7ec1e1bc48ac31f23882c0116ea4f12ec1a78f3042f33bac983a2aecca4d793143364498b7283c50b68c97b7af9f55f433befd24569992ce64be7692eff5b6afecc40670353dd1987c8bb333058c2a5b60f5a50a25c550ddbfb319276dc993ba6cef8be2c21c53057ae091c2346eb10519197107c3c78de7fe210156cf8f884fc6e1215adc875f0b4af7deba45e69b58efde056a99e83bf63bb3705cce822f4d033238b6b6a6be3d292ad13835633ea6dde02ada61189551622567ee5b78e4bd6992398a777cf2993daaab757c06676f7b4cc14bde43514f59007e17b0286ff58cacc76136eb8819e3c65883b219cc81a7dcc74d8ab85f81ef6764eb56c069a29555cd5700cd0682e2a0b5523982f90e6b22e2d3074447d87576869bc3a8a89d159169eaf3d428251f47ab8c19c1bd5da1070443234b66ec9b98667554ea960a20684dcdce30970739eecee44e262e30a855a5162cb93322aa3605cc5c5a909cf0024fdc5fa39976f77fc703d106711504b3b0de472976c139ec904cc6ece336ebf938caed5516434bf9a3612a8a39a9dbee6a5c60be860c7982c3c4549c8ec1af82a6ac6b383c9c7f4138445d4e84bc0950541c678ac39056fda57f9e6767a7c036f6712959e6bdbbd2204a37d349fe84059a9d1e14eeeb9fd30e93c9a52f6d28a8a7187e2ddd7d27c99f6cc935b7c38d4072521c7b52b111669a16318639b4a73d7421afd35206268a4959e991efbee50ff40676656292843fabb482dda664e3af96f006d7a471321b5229fb6a5ec0dc6e006da3c4cae24b69cfb6da61063629020066a0c9584a71541fab240a99d36deb2c292395ad61ff89c3973bf343acf18911eec25dab6ba56a4873714d8851447f3391cf9b4f31b1226c91514a38b54b494c680783792d4dd1a33feb1be017f5e81d8f6380247a01c18c9256e139256ee25fa099315702972db5c9507ef8eeb6548dcc71bb16fc509869a50ef109f1ab94331639ba903d71e8c0d9ed4f6d80c1323db938b640e5debd28f0d9c02210dfa65f76257e2038e27d8e537964fd1f4b2e134000ba23193098266eeff983bbf6c5f729f9dab87bdce29fcf796f2c1695d118d6394524b52b8e78a5d2cd4f58511f996b8268fe9f3c2fb527bbea4d21b0a4fb75335727fe71b13203526a5feb6da3cf37592bdeaea8a4ec82d0a7e3ae12f14f8b1eff4b47b2d53f756c8ead2f283b432cf72a188f02b5dcfd193402aecfd45d1932093520e22b050b1c1aeb9ee3ad6a2666f8c06f795cae86530ea8dabc508d70b46e7014c5b447f82a8225017f43b6ecbffb875d69d0a5dbb98511e17b13f88b59cc5401399dfa1224e11be8f10630ed6f0b320d7c179c3aac7f060ea55c737b40af7cc929013486c6d086587afafc2b0f4efa8bdf811e527a126afdff4a02bf35ab8a9abaa641e2f00825ada1f2da7e793d56a25a68dc84bc74b58c0c4ae15eb4bc6b0f7881623d37e117ed4d8b42412f2002e0874cd8b0781bccd45debbdb78070539d734ac27ecdea5775ca57bd79a211d44fc8111efc38092eec2be0f6ebb2abddf01443ba1d080a5c8bec8712ff5e710671d1fc2f28075b4d923e1c41b99259bc9ccfad695fdbbf99e55e66c463f1d77a683c355500757adbc70ce41b0deb30db0bd8491389e75a44d1"}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100e9869adc0a43e9940800000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00\b\x00W\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) 00:12:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="84a652702e05128e37021dddc3a2843d680f67cf65c6d4ec8a75f76b60ba58a01693573fd5bcba61e3"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x88, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008050}, 0x4004000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r6, 0x5, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x95c}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40808c4}, 0x44001) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000720000056000000220e89fd9a3a536eb4b750a413f1199f6d05701769ad0d7fcfed1011bd2bb077b7bf20209f9473546588b5a4d11bf5cca1644b23470cba34280fc2ab04a60dc523dfbfce4d714ee4513c3be50ec68b9da3a15861a884cd0d5749b86e"], 0x28}}, 0x0) [ 746.223557][ T3368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x1100000000000000}, 0x0) [ 746.259715][ T3372] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 746.263136][ T3377] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="84a652702e05128e37021dddc3a2843d680f67cf65c6d4ec8a75f76b60ba58a01693573fd5bcba61e3"], 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) (async) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x88, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008050}, 0x4004000) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r6, 0x5, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x28}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x95c}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40808c4}, 0x44001) (async, rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000720000056000000220e89fd9a3a536eb4b750a413f1199f6d05701769ad0d7fcfed1011bd2bb077b7bf20209f9473546588b5a4d11bf5cca1644b23470cba34280fc2ab04a60dc523dfbfce4d714ee4513c3be50ec68b9da3a15861a884cd0d5749b86e"], 0x28}}, 0x0) (rerun: 32) 00:12:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f0000002380)={&(0x7f0000001d80)={0x5f0, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xaa8}, @NL80211_ATTR_FRAME={0x5c1, 0x33, @probe_response={@wo_ht={{}, {0x40}, @device_b, @device_a, @random="926625a14222", {0x5, 0x7}}, 0x20b, @random=0x83, 0x4802, @val={0x0, 0xa, @random="426bef5b28da09ef9591"}, @void, @val={0x3, 0x1, 0x9}, @val={0x4, 0x6, {0x0, 0x1, 0xa17, 0xff}}, @val={0x6, 0x2, 0x7}, @void, @void, @void, [{0xdd, 0xb5, "c8d5128bbf77a6295b503c696cd965bb68838ae022982d1ca988f4d713a422dc1abadd23ebbe35a8051cdf915b4870abb46bb22bf5d5b9472a5ff7e9cd7013b5bb77e899d894ac22501cc83767fba9e47162af143721be4be76e25a80bf8012d1b4ea72fec616fb7202f595241711b2a09c14624c471e55e84ebe13d9eb94b398fff9f8b81c72abc629e520bf9512f2e015370558a1d86d2d0305f680f2396f85f24c81f1d2daa8108b35891c75bcd1a257e092c7f"}, {0xdd, 0xba, "6ee9e2bd5c0df478a95c7bc558028547f062a9f3911f8978a2b0ba2b091fc09dd1f3734bce4a91073e24cb35336aea5a3c59b830079c26f869aa7b2b169dc4f9c05465e8817b3e95b6282556985a5cb25751c17b2fa4378ccaca5be9686c603ac7178a2e226d5e866db3f3aa8184dd9c6ca0fae868ac082fc80944cdf2d9c79c01da6d5b412e751c78e1822a03d45b28ec91a92967b5aa763814e964b66d929ebb1d2b2a7cd387c528a126e8e50115e361f7fd722910188ca3f8"}, {0xdd, 0xad, "ceff9ec5c811e80cfa34b9fe612aa6252ecb8de0db9a065832c85f368aa8160038f97eff0314ba73f0615f95d0e84f47f78bf9b385ea879a5b5905ad9b470659a72c2a5f7026939ca242bd8525f7a14dd2f8232de3a80d2949a01ba0d41b44034f3781104e0d5eaece1acf02d9c1671f32bbb3724bfa250c679642bbbff322c89a8f8c9c5e2cdae90d44ae65b560f68b772b5bd21eeb016db65d7df5168783fe0a7595a3f82208a3f850dd280c"}, {0xdd, 0x96, "9046692a5da864e1b8107dacf528844bb54fc1fdbb57a289e19dd069843c58fbdf64d836edd0e302246dcaa0ee782a7f03d44a90ba62e9fb2aa0734b4ba0a9dc5c96edeef7879803e28eef49b2814881131dbe6b55ce11164cec3247811bc351047605bba45a6c307ca6e925b18c207bdf75f6edd8c467776be784d71e2481abad5a4a9ac73a7bb61cd4d3c245e5207106437367d92d"}, {0xdd, 0x5e, "89755354ca3468c95f4d59b8c26704b8cd4c7fcc49bc1333317d0e0f2147c77482301b3f5f9d0c2e0c991f635906afddfc1b23722f4b84a5048ce4d1b30a48a35ff56784de114f721b983ff5f0f336b627692c6ee1dfa2b2889a45b4dc47"}, {0xdd, 0xe7, "07d970dce085845266f74cebb4272d70f38de2383e6a042e185d9da876ae72c04fa2782a5cee36108b1bb5eb5f3eb0da067be5b053f6bfd8252c9cd6525e41b924f3c6451084dbb52b9b5135928d33b66a3da73408153d975e047926aa056268fca23c5d03cc5faf8a5f653d36bd1e7bb53b8c4f0d9c19a177df28009b9ba5991ecaa8db90f4d607618897012b1c21e12099c083dbee3e4b1567c6f2b74e3de2fc74e82dcb2286eaa46a654b570598282d6d2be79a02686725166aa0ce623871ccadaa726feadfc01258a915797a8fd4b9bbc35660d505ad0b9d341ecdf6103d92ec0cc277430f"}, {0xdd, 0xd3, "ce584e65a2a80d91af8b38b97c9c7b0865888c967874ac8f240f2fb29ad6b57dedc10590af7ed0dbf5b5df30bc0563b404aa9a8241fc73cd4e49577126b8a06458c2b5de45b57c0e969af3f67ec2acea4790d56c825f3fbbdbdc3bca211bab43189d4409bcbeaf3b7b4a431bfa705923be5ad98ade10de7772f278995ba7c1bbadde086315e014f1cbc1a8b81b21ac45b707c7185befe53978e44bec01f1d865af0c02c008703a0c42d25b94c821981beb80fd55bd942d6b39695f38842c3a0def5ef59add2d2caff630aede404555fa397762"}, {0xdd, 0xa4, "6fae89ee399f786d22c970d7d14a0822967d3acaee4f60d6adeb1c108ce56214acd8df45020d2f4f48d3d7afd4eacbe3ffd7d22c347e868306913fc4d8ebef18fc625ce3f40119caf634cacd8c4463c4f478d9e12362e417e4c59f35887a13e099103b93c10e3c5625c60e0a5a787f5d20e6fc9acefd75b29c7118620b583e3b1c00eda8ea65121601a1da3bc68c94ec8cad9dbb7eee53bc605f205faca738c39820175b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x5f0}, 0x1, 0x0, 0x0, 0x40}, 0x20d4) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) (async) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x541b, &(0x7f0000000040)) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f00000012c0)={0x1, 0x5, @status={[0x7fffffff, 0xffffffff, 0x7, 0x5, 0xaf, 0x81]}, [0x3f, 0x8, 0x579, 0x2e63, 0x5, 0x5, 0x400, 0x8, 0x48a, 0x0, 0x7, 0x20, 0x9, 0x2, 0xffffffff, 0x101, 0x6, 0xcf, 0x3818, 0x7f0, 0x5, 0x800, 0x8, 0x10000, 0xd7, 0x1000, 0xc7d0, 0x88b, 0x3, 0xe23, 0x61ed, 0x100000000, 0x100000000, 0x9, 0x0, 0xfffffffffffffffb, 0x9, 0xc0d, 0x1, 0x9, 0x8000000000000000, 0x1145, 0x7ff, 0x40, 0x2, 0x194d, 0x7ff, 0xffffffff, 0x9, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0xb9, 0x1, 0x3f, 0x8000000000000001, 0xe, 0x2, 0x0, 0x7, 0x10000, 0x9, 0xbb]}) (async) write(r11, &(0x7f0000004200)='t', 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f00000002c0)={0x0, 0x0, "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", "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"}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x88, r1, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008050}, 0x4004000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r6, 0x5, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x28}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x95c}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40808c4}, 0x44001) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0c0099000720000056000000220e89fd9a3a536eb4b750a413f1199f6d05701769ad0d7fcfed1011bd2bb077b7bf20209f9473546588b5a4d11bf5cca1644b23470cba34280fc2ab04a60dc523dfbfce4d714ee4513c3be50ec68b9da3a15861a884cd0d5749b86e"], 0x28}}, 0x0) (rerun: 64) [ 746.498418][ T3478] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 746.508519][ T3487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050046000000080003d834003f6e000000000000000000", @ANYRES32=0x0, @ANYBLOB="080000001c6fa49b023f1e106c58015e82bcdc5446f74114dd3d0985e7da67ad4adbe60e05619b4f83a0ab4c7b8e55a8e857ef758a7061fe1190673406cc9cf3b75369e7dc79e8df71c40b8fd77bf9fa09efb885c65a95df7eb2c0f1c31aa6b290e1e35d7a1eda5389bb726226e650e72949dc8af92147e05a0b74f33e55daf3133740e966ca578b44bc050c0760d8223cb8dda07600000100000000007363f19a8c3f043a4042d4a3b87d1b45e4aff0ea31fa3b50797cb955b0dd793b41da4323d7e039bdfd9f4a8a185cc22eba28d0b1d95d4a5582365e7dcc33ac30592dca9e3cd76b51c4ae29"], 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x800, 0xfffffe01, {{0x36, 0x4, 0x0, 0x2e, 0xd8, 0x68, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x40, 0x0, [{0x5, 0xa, "29fd712733771cd1"}, {0x2, 0x2}, {0x6, 0x6, "d8868ad9"}, {0x0, 0xc, "9fd113fe8d697a32f90d"}, {0x7, 0xb, "7a70977c767f3ca2de"}, {0x2, 0xe, "e2fe06641b4393df4c791f96"}, {0x6, 0x3, "cd"}]}, @timestamp_prespec={0x44, 0x2c, 0xc, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x20, 0x0}}, {@private=0xa010102, 0x1}, {@multicast1, 0x8}, {@multicast1, 0x8001}, {@broadcast, 0x81}]}, @noop, @noop, @timestamp_prespec={0x44, 0x4c, 0x21, 0x3, 0x1, [{@multicast2, 0x5}, {@broadcast, 0x5}, {@multicast1, 0x417884f4}, {@multicast1, 0x7}, {@remote, 0x6}, {@multicast2}, {@multicast2, 0x4}, {@private=0xa010100, 0x4}, {@multicast2, 0x4}]}, @end, @ssrr={0x89, 0x7, 0x61, [@empty]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20044040}, 0x880) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100e9869adc0a43e9940800000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00\b\x00W\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100e9869adc0a43e9940800000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00\b\x00W\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) (async) [ 746.628737][ T3512] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x400300}, 0x0) 00:12:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f0000002380)={&(0x7f0000001d80)={0x5f0, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xaa8}, @NL80211_ATTR_FRAME={0x5c1, 0x33, @probe_response={@wo_ht={{}, {0x40}, @device_b, @device_a, @random="926625a14222", {0x5, 0x7}}, 0x20b, @random=0x83, 0x4802, @val={0x0, 0xa, @random="426bef5b28da09ef9591"}, @void, @val={0x3, 0x1, 0x9}, @val={0x4, 0x6, {0x0, 0x1, 0xa17, 0xff}}, @val={0x6, 0x2, 0x7}, @void, @void, @void, [{0xdd, 0xb5, "c8d5128bbf77a6295b503c696cd965bb68838ae022982d1ca988f4d713a422dc1abadd23ebbe35a8051cdf915b4870abb46bb22bf5d5b9472a5ff7e9cd7013b5bb77e899d894ac22501cc83767fba9e47162af143721be4be76e25a80bf8012d1b4ea72fec616fb7202f595241711b2a09c14624c471e55e84ebe13d9eb94b398fff9f8b81c72abc629e520bf9512f2e015370558a1d86d2d0305f680f2396f85f24c81f1d2daa8108b35891c75bcd1a257e092c7f"}, {0xdd, 0xba, "6ee9e2bd5c0df478a95c7bc558028547f062a9f3911f8978a2b0ba2b091fc09dd1f3734bce4a91073e24cb35336aea5a3c59b830079c26f869aa7b2b169dc4f9c05465e8817b3e95b6282556985a5cb25751c17b2fa4378ccaca5be9686c603ac7178a2e226d5e866db3f3aa8184dd9c6ca0fae868ac082fc80944cdf2d9c79c01da6d5b412e751c78e1822a03d45b28ec91a92967b5aa763814e964b66d929ebb1d2b2a7cd387c528a126e8e50115e361f7fd722910188ca3f8"}, {0xdd, 0xad, "ceff9ec5c811e80cfa34b9fe612aa6252ecb8de0db9a065832c85f368aa8160038f97eff0314ba73f0615f95d0e84f47f78bf9b385ea879a5b5905ad9b470659a72c2a5f7026939ca242bd8525f7a14dd2f8232de3a80d2949a01ba0d41b44034f3781104e0d5eaece1acf02d9c1671f32bbb3724bfa250c679642bbbff322c89a8f8c9c5e2cdae90d44ae65b560f68b772b5bd21eeb016db65d7df5168783fe0a7595a3f82208a3f850dd280c"}, {0xdd, 0x96, "9046692a5da864e1b8107dacf528844bb54fc1fdbb57a289e19dd069843c58fbdf64d836edd0e302246dcaa0ee782a7f03d44a90ba62e9fb2aa0734b4ba0a9dc5c96edeef7879803e28eef49b2814881131dbe6b55ce11164cec3247811bc351047605bba45a6c307ca6e925b18c207bdf75f6edd8c467776be784d71e2481abad5a4a9ac73a7bb61cd4d3c245e5207106437367d92d"}, {0xdd, 0x5e, "89755354ca3468c95f4d59b8c26704b8cd4c7fcc49bc1333317d0e0f2147c77482301b3f5f9d0c2e0c991f635906afddfc1b23722f4b84a5048ce4d1b30a48a35ff56784de114f721b983ff5f0f336b627692c6ee1dfa2b2889a45b4dc47"}, {0xdd, 0xe7, "07d970dce085845266f74cebb4272d70f38de2383e6a042e185d9da876ae72c04fa2782a5cee36108b1bb5eb5f3eb0da067be5b053f6bfd8252c9cd6525e41b924f3c6451084dbb52b9b5135928d33b66a3da73408153d975e047926aa056268fca23c5d03cc5faf8a5f653d36bd1e7bb53b8c4f0d9c19a177df28009b9ba5991ecaa8db90f4d607618897012b1c21e12099c083dbee3e4b1567c6f2b74e3de2fc74e82dcb2286eaa46a654b570598282d6d2be79a02686725166aa0ce623871ccadaa726feadfc01258a915797a8fd4b9bbc35660d505ad0b9d341ecdf6103d92ec0cc277430f"}, {0xdd, 0xd3, "ce584e65a2a80d91af8b38b97c9c7b0865888c967874ac8f240f2fb29ad6b57dedc10590af7ed0dbf5b5df30bc0563b404aa9a8241fc73cd4e49577126b8a06458c2b5de45b57c0e969af3f67ec2acea4790d56c825f3fbbdbdc3bca211bab43189d4409bcbeaf3b7b4a431bfa705923be5ad98ade10de7772f278995ba7c1bbadde086315e014f1cbc1a8b81b21ac45b707c7185befe53978e44bec01f1d865af0c02c008703a0c42d25b94c821981beb80fd55bd942d6b39695f38842c3a0def5ef59add2d2caff630aede404555fa397762"}, {0xdd, 0xa4, "6fae89ee399f786d22c970d7d14a0822967d3acaee4f60d6adeb1c108ce56214acd8df45020d2f4f48d3d7afd4eacbe3ffd7d22c347e868306913fc4d8ebef18fc625ce3f40119caf634cacd8c4463c4f478d9e12362e417e4c59f35887a13e099103b93c10e3c5625c60e0a5a787f5d20e6fc9acefd75b29c7118620b583e3b1c00eda8ea65121601a1da3bc68c94ec8cad9dbb7eee53bc605f205faca738c39820175b"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x5f0}, 0x1, 0x0, 0x0, 0x40}, 0x20d4) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) (async) ioctl$sock_inet_sctp_SIOCINQ(r10, 0x541b, &(0x7f0000000040)) (async) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r9, 0xca289435, &(0x7f00000012c0)={0x1, 0x5, @status={[0x7fffffff, 0xffffffff, 0x7, 0x5, 0xaf, 0x81]}, [0x3f, 0x8, 0x579, 0x2e63, 0x5, 0x5, 0x400, 0x8, 0x48a, 0x0, 0x7, 0x20, 0x9, 0x2, 0xffffffff, 0x101, 0x6, 0xcf, 0x3818, 0x7f0, 0x5, 0x800, 0x8, 0x10000, 0xd7, 0x1000, 0xc7d0, 0x88b, 0x3, 0xe23, 0x61ed, 0x100000000, 0x100000000, 0x9, 0x0, 0xfffffffffffffffb, 0x9, 0xc0d, 0x1, 0x9, 0x8000000000000000, 0x1145, 0x7ff, 0x40, 0x2, 0x194d, 0x7ff, 0xffffffff, 0x9, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0xb9, 0x1, 0x3f, 0x8000000000000001, 0xe, 0x2, 0x0, 0x7, 0x10000, 0x9, 0xbb]}) write(r11, &(0x7f0000004200)='t', 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r14, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0xd000943e, &(0x7f00000002c0)={0x0, 0x0, "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", "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"}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x2c00000000000000}, 0x0) 00:12:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050046000000080003d834003f6e000000000000000000", @ANYRES32=0x0, @ANYBLOB="080000001c6fa49b023f1e106c58015e82bcdc5446f74114dd3d0985e7da67ad4adbe60e05619b4f83a0ab4c7b8e55a8e857ef758a7061fe1190673406cc9cf3b75369e7dc79e8df71c40b8fd77bf9fa09efb885c65a95df7eb2c0f1c31aa6b290e1e35d7a1eda5389bb726226e650e72949dc8af92147e05a0b74f33e55daf3133740e966ca578b44bc050c0760d8223cb8dda07600000100000000007363f19a8c3f043a4042d4a3b87d1b45e4aff0ea31fa3b50797cb955b0dd793b41da4323d7e039bdfd9f4a8a185cc22eba28d0b1d95d4a5582365e7dcc33ac30592dca9e3cd76b51c4ae29"], 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x800, 0xfffffe01, {{0x36, 0x4, 0x0, 0x2e, 0xd8, 0x68, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x40, 0x0, [{0x5, 0xa, "29fd712733771cd1"}, {0x2, 0x2}, {0x6, 0x6, "d8868ad9"}, {0x0, 0xc, "9fd113fe8d697a32f90d"}, {0x7, 0xb, "7a70977c767f3ca2de"}, {0x2, 0xe, "e2fe06641b4393df4c791f96"}, {0x6, 0x3, "cd"}]}, @timestamp_prespec={0x44, 0x2c, 0xc, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x20, 0x0}}, {@private=0xa010102, 0x1}, {@multicast1, 0x8}, {@multicast1, 0x8001}, {@broadcast, 0x81}]}, @noop, @noop, @timestamp_prespec={0x44, 0x4c, 0x21, 0x3, 0x1, [{@multicast2, 0x5}, {@broadcast, 0x5}, {@multicast1, 0x417884f4}, {@multicast1, 0x7}, {@remote, 0x6}, {@multicast2}, {@multicast2, 0x4}, {@private=0xa010100, 0x4}, {@multicast2, 0x4}]}, @end, @ssrr={0x89, 0x7, 0x61, [@empty]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20044040}, 0x880) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 746.793395][ T3580] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 746.808588][ T3598] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0x30, &(0x7f0000000200)={&(0x7f0000000040)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x404c894}, 0x840) 00:12:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x273}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040805) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x183500, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050046000000080003d834003f6e000000000000000000", @ANYRES32=0x0, @ANYBLOB="080000001c6fa49b023f1e106c58015e82bcdc5446f74114dd3d0985e7da67ad4adbe60e05619b4f83a0ab4c7b8e55a8e857ef758a7061fe1190673406cc9cf3b75369e7dc79e8df71c40b8fd77bf9fa09efb885c65a95df7eb2c0f1c31aa6b290e1e35d7a1eda5389bb726226e650e72949dc8af92147e05a0b74f33e55daf3133740e966ca578b44bc050c0760d8223cb8dda07600000100000000007363f19a8c3f043a4042d4a3b87d1b45e4aff0ea31fa3b50797cb955b0dd793b41da4323d7e039bdfd9f4a8a185cc22eba28d0b1d95d4a5582365e7dcc33ac30592dca9e3cd76b51c4ae29"], 0x24}}, 0x0) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x800, 0xfffffe01, {{0x36, 0x4, 0x0, 0x2e, 0xd8, 0x68, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@cipso={0x86, 0x40, 0x0, [{0x5, 0xa, "29fd712733771cd1"}, {0x2, 0x2}, {0x6, 0x6, "d8868ad9"}, {0x0, 0xc, "9fd113fe8d697a32f90d"}, {0x7, 0xb, "7a70977c767f3ca2de"}, {0x2, 0xe, "e2fe06641b4393df4c791f96"}, {0x6, 0x3, "cd"}]}, @timestamp_prespec={0x44, 0x2c, 0xc, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x20, 0x0}}, {@private=0xa010102, 0x1}, {@multicast1, 0x8}, {@multicast1, 0x8001}, {@broadcast, 0x81}]}, @noop, @noop, @timestamp_prespec={0x44, 0x4c, 0x21, 0x3, 0x1, [{@multicast2, 0x5}, {@broadcast, 0x5}, {@multicast1, 0x417884f4}, {@multicast1, 0x7}, {@remote, 0x6}, {@multicast2}, {@multicast2, 0x4}, {@private=0xa010100, 0x4}, {@multicast2, 0x4}]}, @end, @ssrr={0x89, 0x7, 0x61, [@empty]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xe0, r2, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20044040}, 0x880) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100e9869adc0a43e9940800000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00\b\x00W\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) 00:12:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0x30, &(0x7f0000000200)={&(0x7f0000000040)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x404c894}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0x30, &(0x7f0000000200)={&(0x7f0000000040)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x404c894}, 0x840) (async) 00:12:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x2d0b000000000000}, 0x0) 00:12:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0x30, &(0x7f0000000200)={&(0x7f0000000040)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x404c894}, 0x840) 00:12:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (rerun: 32) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x273}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040805) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (rerun: 32) write(r7, &(0x7f0000004200)='t', 0x1) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x183500, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x1000000}, 0x0) 00:12:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0xc0, r4, 0xb2d, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x6}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2e7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xc0}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r4, 0x411, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc001}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44081}, 0x20000884) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="037b637bebd3a5c4d60f756b4b8300001541fa671e5eefad56b55fb980e4f03656cedb4bf2ed0af1ac11de86e164ee75bc95b4a62f87532ca9131a499d91b79a06abe32adb2ca28449f51f66695af0f74aa3d8f6ef9ca38b2f04e2770122e928231ab4e13366ddff5c557157ad759b5988cd1858e85cf1aaee656ed2bdc1f5d7f6207efd6ad8dabfbe3a9fd7930165cb9c17d57dcf8abafa"], 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000008f7c6c1c8ce63ae32264d9aff299b02e9a749da4b1693816c279b3df25bfe53a3a60a9c32f92a95f2b348a118c894d49769d9f7cb7324579312eaf54ad2897cb4c01917a38c5a334366c994476d87f1341a8bb22152176c263e5921adb7b0501ce548cf115c4cc3baa18ffd374bfce9b392c7ee62f31beea09d21f43c8a04b1bdc3ba2f7faf35abb397c57a946c504", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) 00:12:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r3, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x16}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x273}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040805) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) (async) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000003c0), 0x183500, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0xf1) write(r2, &(0x7f0000004200)='t', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000081fd0300", @ANYRES32=r3, @ANYBLOB='\b\x00'], 0x2c}}, 0x0) 00:12:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x4000000000000000}, 0x0) 00:12:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000008f7c6c1c8ce63ae32264d9aff299b02e9a749da4b1693816c279b3df25bfe53a3a60a9c32f92a95f2b348a118c894d49769d9f7cb7324579312eaf54ad2897cb4c01917a38c5a334366c994476d87f1341a8bb22152176c263e5921adb7b0501ce548cf115c4cc3baa18ffd374bfce9b392c7ee62f31beea09d21f43c8a04b1bdc3ba2f7faf35abb397c57a946c504", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) 00:12:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0xc0, r4, 0xb2d, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x6}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2e7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xc0}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r4, 0x411, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc001}, 0x4008000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44081}, 0x20000884) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="037b637bebd3a5c4d60f756b4b8300001541fa671e5eefad56b55fb980e4f03656cedb4bf2ed0af1ac11de86e164ee75bc95b4a62f87532ca9131a499d91b79a06abe32adb2ca28449f51f66695af0f74aa3d8f6ef9ca38b2f04e2770122e928231ab4e13366ddff5c557157ad759b5988cd1858e85cf1aaee656ed2bdc1f5d7f6207efd6ad8dabfbe3a9fd7930165cb9c17d57dcf8abafa"], 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000008f7c6c1c8ce63ae32264d9aff299b02e9a749da4b1693816c279b3df25bfe53a3a60a9c32f92a95f2b348a118c894d49769d9f7cb7324579312eaf54ad2897cb4c01917a38c5a334366c994476d87f1341a8bb22152176c263e5921adb7b0501ce548cf115c4cc3baa18ffd374bfce9b392c7ee62f31beea09d21f43c8a04b1bdc3ba2f7faf35abb397c57a946c504", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) 00:12:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x144, r8, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x61}}}}, [@NL80211_ATTR_FRAME_MATCH={0xe6, 0x5b, "8dd5b655886e9687cdd3b62301980785fbdbd60c7f1f5a396cf8fbfe6dce0d9fe1e69afe6f04aabddd9e95030a990335fbeb073be04b0a1d9507c0f63266d07330f0ea10d4003332608c4d6faa38bb20967be71c71958643b6acbaa2ecfe0064773c98f20072b693db8b6c2b3a9cf63c59bbfbb3ffba4a7db8a7c6ed41f3520f2d0e93992812d8ae31486899957e5ff23805128cb9eae4cf467d6114cce99fe9b1df5ea47bf7a44032c9b7d81e41499acb1b942149c6f44b2e32f545661b48d00978391db1e0d2b74efbbb342f237358dd474b369e9b288a13164fc2cd47d555a82b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_MATCH={0x2c, 0x5b, "8de8cb68e05ac3ce1a8069d36a1dd0ffd5850bc12b3702ba6727ce0ff762f7c391407286d9928acc"}]}, 0x144}, 0x1, 0x0, 0x0, 0x8001}, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000580)={'bond_slave_0\x00', &(0x7f0000000540)=@ethtool_eee={0x45, 0x4, 0x8, 0x4, 0x8, 0x3, 0x5, 0x9, [0xffffffff, 0x6]}}) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r14 = fcntl$dupfd(r12, 0x406, r7) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r14, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x2004c041) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="98030000", @ANYRES16=r13, @ANYBLOB="0101280500103162973a00fcdbfe8e613a66289787002008000300", @ANYRES32=r15, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r13, 0x4, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:27 executing program 0: r0 = memfd_secret(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, r1, &(0x7f00000002c0)=0xf, 0x7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@bridge_delneigh={0x58, 0x1d, 0x100, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x0, r2, 0x40, 0x4, 0x8}, [@NDA_PROBES={0x8, 0x4, 0x3}, @NDA_SRC_VNI={0x8, 0xb, 0xfffff6a2}, @NDA_NH_ID={0x8, 0xd, 0x20}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_SRC_VNI={0x8, 0xb, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x48004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xfffffffffffffff7}}, './file0\x00'}) r7 = pidfd_getfd(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5f6a6e43}}, './file0\x00'}) r9 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000003c0), 0x5c303, 0x114) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x48011800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@newlink={0xbc, 0x10, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1001, 0x200}, [@IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}]}, @IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_GROUP={0x8, 0x1b, 0xca}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xf5d3}, @IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_WEIGHT={0x8, 0xf, 0x3f}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_PHYS_PORT_ID={0x20, 0x22, "ba94fb4d995d43705d85946603fc0640d9fd57226fb4d33f411fb43e"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x10) 00:12:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0xc0, r4, 0xb2d, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8000}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x6}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xf}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2e7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0xc0}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa8, r4, 0x411, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfe}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1f}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0xc001}, 0x4008000) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44081}, 0x20000884) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="037b637bebd3a5c4d60f756b4b8300001541fa671e5eefad56b55fb980e4f03656cedb4bf2ed0af1ac11de86e164ee75bc95b4a62f87532ca9131a499d91b79a06abe32adb2ca28449f51f66695af0f74aa3d8f6ef9ca38b2f04e2770122e928231ab4e13366ddff5c557157ad759b5988cd1858e85cf1aaee656ed2bdc1f5d7f6207efd6ad8dabfbe3a9fd7930165cb9c17d57dcf8abafa"], 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x2000000}, 0x0) 00:12:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x6000000000000000}, 0x0) 00:12:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0xf1) write(r2, &(0x7f0000004200)='t', 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000081fd0300", @ANYRES32=r3, @ANYBLOB='\b\x00'], 0x2c}}, 0x0) 00:12:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x144, r8, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x61}}}}, [@NL80211_ATTR_FRAME_MATCH={0xe6, 0x5b, "8dd5b655886e9687cdd3b62301980785fbdbd60c7f1f5a396cf8fbfe6dce0d9fe1e69afe6f04aabddd9e95030a990335fbeb073be04b0a1d9507c0f63266d07330f0ea10d4003332608c4d6faa38bb20967be71c71958643b6acbaa2ecfe0064773c98f20072b693db8b6c2b3a9cf63c59bbfbb3ffba4a7db8a7c6ed41f3520f2d0e93992812d8ae31486899957e5ff23805128cb9eae4cf467d6114cce99fe9b1df5ea47bf7a44032c9b7d81e41499acb1b942149c6f44b2e32f545661b48d00978391db1e0d2b74efbbb342f237358dd474b369e9b288a13164fc2cd47d555a82b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_MATCH={0x2c, 0x5b, "8de8cb68e05ac3ce1a8069d36a1dd0ffd5850bc12b3702ba6727ce0ff762f7c391407286d9928acc"}]}, 0x144}, 0x1, 0x0, 0x0, 0x8001}, 0x8) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000580)={'bond_slave_0\x00', &(0x7f0000000540)=@ethtool_eee={0x45, 0x4, 0x8, 0x4, 0x8, 0x3, 0x5, 0x9, [0xffffffff, 0x6]}}) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r14 = fcntl$dupfd(r12, 0x406, r7) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r14, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x2004c041) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="98030000", @ANYRES16=r13, @ANYBLOB="0101280500103162973a00fcdbfe8e613a66289787002008000300", @ANYRES32=r15, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r13, 0x4, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:27 executing program 0: r0 = memfd_secret(0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, r1, &(0x7f00000002c0)=0xf, 0x7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@bridge_delneigh={0x58, 0x1d, 0x100, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x0, r2, 0x40, 0x4, 0x8}, [@NDA_PROBES={0x8, 0x4, 0x3}, @NDA_SRC_VNI={0x8, 0xb, 0xfffff6a2}, @NDA_NH_ID={0x8, 0xd, 0x20}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_SRC_VNI={0x8, 0xb, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x48004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xfffffffffffffff7}}, './file0\x00'}) r7 = pidfd_getfd(r0, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5f6a6e43}}, './file0\x00'}) r9 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000003c0), 0x5c303, 0x114) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x48011800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@newlink={0xbc, 0x10, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1001, 0x200}, [@IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}]}, @IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_GROUP={0x8, 0x1b, 0xca}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xf5d3}, @IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_WEIGHT={0x8, 0xf, 0x3f}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_PHYS_PORT_ID={0x20, 0x22, "ba94fb4d995d43705d85946603fc0640d9fd57226fb4d33f411fb43e"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x10) memfd_secret(0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) sendfile(r0, r1, &(0x7f00000002c0)=0xf, 0x7) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@loopback}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@bridge_delneigh={0x58, 0x1d, 0x100, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x0, r2, 0x40, 0x4, 0x8}, [@NDA_PROBES={0x8, 0x4, 0x3}, @NDA_SRC_VNI={0x8, 0xb, 0xfffff6a2}, @NDA_NH_ID={0x8, 0xd, 0x20}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_SRC_VNI={0x8, 0xb, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x48004) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) write(r5, &(0x7f0000004200)='t', 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xfffffffffffffff7}}, './file0\x00'}) (async) pidfd_getfd(r0, r1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5f6a6e43}}, './file0\x00'}) (async) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000003c0), 0x5c303, 0x114) (async) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x48011800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@newlink={0xbc, 0x10, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1001, 0x200}, [@IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}]}, @IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_GROUP={0x8, 0x1b, 0xca}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xf5d3}, @IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_WEIGHT={0x8, 0xf, 0x3f}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_PHYS_PORT_ID={0x20, 0x22, "ba94fb4d995d43705d85946603fc0640d9fd57226fb4d33f411fb43e"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) 00:12:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x3c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4040001) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) 00:12:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x144, r8, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x61}}}}, [@NL80211_ATTR_FRAME_MATCH={0xe6, 0x5b, "8dd5b655886e9687cdd3b62301980785fbdbd60c7f1f5a396cf8fbfe6dce0d9fe1e69afe6f04aabddd9e95030a990335fbeb073be04b0a1d9507c0f63266d07330f0ea10d4003332608c4d6faa38bb20967be71c71958643b6acbaa2ecfe0064773c98f20072b693db8b6c2b3a9cf63c59bbfbb3ffba4a7db8a7c6ed41f3520f2d0e93992812d8ae31486899957e5ff23805128cb9eae4cf467d6114cce99fe9b1df5ea47bf7a44032c9b7d81e41499acb1b942149c6f44b2e32f545661b48d00978391db1e0d2b74efbbb342f237358dd474b369e9b288a13164fc2cd47d555a82b"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xffff}, @NL80211_ATTR_FRAME_MATCH={0x2c, 0x5b, "8de8cb68e05ac3ce1a8069d36a1dd0ffd5850bc12b3702ba6727ce0ff762f7c391407286d9928acc"}]}, 0x144}, 0x1, 0x0, 0x0, 0x8001}, 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000580)={'bond_slave_0\x00', &(0x7f0000000540)=@ethtool_eee={0x45, 0x4, 0x8, 0x4, 0x8, 0x3, 0x5, 0x9, [0xffffffff, 0x6]}}) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000580)={'bond_slave_0\x00', &(0x7f0000000540)=@ethtool_eee={0x45, 0x4, 0x8, 0x4, 0x8, 0x3, 0x5, 0x9, [0xffffffff, 0x6]}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) fcntl$dupfd(r12, 0x406, r7) (async) r14 = fcntl$dupfd(r12, 0x406, r7) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r14, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x2004c041) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r14, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x5c, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x2004c041) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="98030000", @ANYRES16=r13, @ANYBLOB="0101280500103162973a00fcdbfe8e613a66289787002008000300", @ANYRES32=r15, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYBLOB="98030000", @ANYRES16=r13, @ANYBLOB="0101280500103162973a00fcdbfe8e613a66289787002008000300", @ANYRES32=r15, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r13, 0x4, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, r13, 0x4, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0xf1) write(r2, &(0x7f0000004200)='t', 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000800000081fd0300", @ANYRES32=r3, @ANYBLOB='\b\x00'], 0x2c}}, 0x0) 00:12:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0xa8c8c59cffff0000}, 0x0) 00:12:28 executing program 0: r0 = memfd_secret(0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r0, r1, &(0x7f00000002c0)=0xf, 0x7) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@loopback, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@bridge_delneigh={0x58, 0x1d, 0x100, 0x70bd2b, 0x25dfdbff, {0xa, 0x0, 0x0, r2, 0x40, 0x4, 0x8}, [@NDA_PROBES={0x8, 0x4, 0x3}, @NDA_SRC_VNI={0x8, 0xb, 0xfffff6a2}, @NDA_NH_ID={0x8, 0xd, 0x20}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_SRC_VNI={0x8, 0xb, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x48004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xfffffffffffffff7}}, './file0\x00'}) r7 = pidfd_getfd(r0, r1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5f6a6e43}}, './file0\x00'}) (async, rerun: 64) r9 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f00000003c0), 0x5c303, 0x114) (rerun: 64) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x48011800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=@newlink={0xbc, 0x10, 0x0, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1001, 0x200}, [@IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x6}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}, @IFLA_XDP_FD={0x8, 0x1, r0}, @IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r9}]}, @IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_GROUP={0x8, 0x1b, 0xca}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xf5d3}, @IFLA_EVENT={0x8, 0x2c, 0x2}, @IFLA_WEIGHT={0x8, 0xf, 0x3f}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x2}, @IFLA_PHYS_PORT_ID={0x20, 0x22, "ba94fb4d995d43705d85946603fc0640d9fd57226fb4d33f411fb43e"}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x10) 00:12:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) (async) write(r1, &(0x7f0000004200)='t', 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x3c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4040001) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x3c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4040001) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) 00:12:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000085) 00:12:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x3000000}, 0x0) 00:12:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:28 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000085) 00:12:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 00:12:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:12:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x21}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000085) 00:12:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x3c}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4040001) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) 00:12:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x70, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x31f}, @NL80211_ATTR_VENDOR_DATA={0x34, 0xc5, "f50c32f4b12af6f26ca7d36a4d319323e2a653c276cf0a94a2264cc8512f6e917751193f367ee679e4ffe24807965035"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80000001}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000801) 00:12:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0xffff021e0080ffff}, 0x0) 00:12:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000004c0)={r1, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="a8000000", @ANYRES32=r1, @ANYBLOB="010027bd7000fbdbdf25370000000c009900050000001b000000080057000000000008005700000000000800a0000000000008002201a1000300000008009f00050000000800a11cff0f000005001801090000000500180123000000050018010200000000270043000000080057000300000008005700060000000800a0000000000005001801b30000000800a0000700"/161], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0xc8c4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x5e8fafde}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1ec, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_IE={0xf5, 0x2a, [@perr={0x84, 0x2, {0x7}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x0, 0x0, {0x8000000000, 0x1, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x0, 0x81}}, @ssid={0x0, 0xc, @random="25a8816868c81cc90c4369db"}, @tim={0x5, 0x93, {0x1, 0x5c, 0x8, "3f86ec3a85e577883d335b63f8910d0b585f4c411f2fe3195e641f963bc7369e6629ce34130493b29ffba1bef0f1c91d53d28c0cd9de7d8aba4e2c39efa1a032b21939ab3e8869bbf1440f68e1d33b21c49499c914915936229f189f2b3ab106266866d4d0ad61fc70213d2872367444a3a8fb85e8ec2f3fe7ec1b6402344a059db09e89e550bbc88439b267f2803086"}}, @rann={0x7e, 0x15, {{0x1}, 0x40, 0x3, @broadcast, 0x8, 0x91, 0x80000000}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x9, 0x4, 0x7, 0x4}}]}, @NL80211_ATTR_IE={0xc3, 0x2a, [@random_vendor={0xdd, 0x80, "ebf68fe34a262ad1d8083968f0a7e6893848abf4937444ceeaa064a570f4676194c009828dcb757258638ad27a601f3d159de626cf04430710ccfb6c7b3f9e976793999a4a2c16145c0c67bf2dfbc103c96680548f9a372f89aaf27f62f95c5c29a6cb6504ca83b320561234c18c5cff73f88c4f6778549380a068d9abab024b"}, @challenge={0x10, 0x1, 0x4c}, @peer_mgmt={0x75, 0x14, {0x1, 0x2, @void, @void, @val="d45930ce9bdbf0e4223b56c8221c2dba"}}, @ht={0x2d, 0x1a, {0x800, 0x2, 0x4, 0x0, {0x9, 0x39e, 0x0, 0x80, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x8, 0x90}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40000}, 0x8850) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a0034002202020202020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x70, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x31f}, @NL80211_ATTR_VENDOR_DATA={0x34, 0xc5, "f50c32f4b12af6f26ca7d36a4d319323e2a653c276cf0a94a2264cc8512f6e917751193f367ee679e4ffe24807965035"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80000001}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000801) 00:12:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:12:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x4000000}, 0x0) 00:12:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000004c0)={r1, 0x2}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="a8000000", @ANYRES32=r1, @ANYBLOB="010027bd7000fbdbdf25370000000c009900050000001b000000080057000000000008005700000000000800a0000000000008002201a1000300000008009f00050000000800a11cff0f000005001801090000000500180123000000050018010200000000270043000000080057000300000008005700060000000800a0000000000005001801b30000000800a0000700"/161], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0xc8c4) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x5e8fafde}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1ec, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_IE={0xf5, 0x2a, [@perr={0x84, 0x2, {0x7}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x0, 0x0, {0x8000000000, 0x1, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x0, 0x81}}, @ssid={0x0, 0xc, @random="25a8816868c81cc90c4369db"}, @tim={0x5, 0x93, {0x1, 0x5c, 0x8, "3f86ec3a85e577883d335b63f8910d0b585f4c411f2fe3195e641f963bc7369e6629ce34130493b29ffba1bef0f1c91d53d28c0cd9de7d8aba4e2c39efa1a032b21939ab3e8869bbf1440f68e1d33b21c49499c914915936229f189f2b3ab106266866d4d0ad61fc70213d2872367444a3a8fb85e8ec2f3fe7ec1b6402344a059db09e89e550bbc88439b267f2803086"}}, @rann={0x7e, 0x15, {{0x1}, 0x40, 0x3, @broadcast, 0x8, 0x91, 0x80000000}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x9, 0x4, 0x7, 0x4}}]}, @NL80211_ATTR_IE={0xc3, 0x2a, [@random_vendor={0xdd, 0x80, "ebf68fe34a262ad1d8083968f0a7e6893848abf4937444ceeaa064a570f4676194c009828dcb757258638ad27a601f3d159de626cf04430710ccfb6c7b3f9e976793999a4a2c16145c0c67bf2dfbc103c96680548f9a372f89aaf27f62f95c5c29a6cb6504ca83b320561234c18c5cff73f88c4f6778549380a068d9abab024b"}, @challenge={0x10, 0x1, 0x4c}, @peer_mgmt={0x75, 0x14, {0x1, 0x2, @void, @void, @val="d45930ce9bdbf0e4223b56c8221c2dba"}}, @ht={0x2d, 0x1a, {0x800, 0x2, 0x4, 0x0, {0x9, 0x39e, 0x0, 0x80, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x8, 0x90}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40000}, 0x8850) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a0034002202020202020000"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x70, r4, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x55}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x31f}, @NL80211_ATTR_VENDOR_DATA={0x34, 0xc5, "f50c32f4b12af6f26ca7d36a4d319323e2a653c276cf0a94a2264cc8512f6e917751193f367ee679e4ffe24807965035"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x80000001}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x20}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20000801) 00:12:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0xffff80001e02ffff}, 0x0) 00:12:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x4000000) 00:12:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) (async) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f00000004c0)={r1, 0x2}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="a8000000", @ANYRES32=r1, @ANYBLOB="010027bd7000fbdbdf25370000000c009900050000001b000000080057000000000008005700000000000800a0000000000008002201a1000300000008009f00050000000800a11cff0f000005001801090000000500180123000000050018010200000000270043000000080057000300000008005700060000000800a0000000000005001801b30000000800a0000700"/161], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0xc8c4) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x5e8fafde}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f00000007c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000580)={0x1ec, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_IE={0xf5, 0x2a, [@perr={0x84, 0x2, {0x7}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x0, 0x0, {0x8000000000, 0x1, 0x0, 0x5, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x0, 0x81}}, @ssid={0x0, 0xc, @random="25a8816868c81cc90c4369db"}, @tim={0x5, 0x93, {0x1, 0x5c, 0x8, "3f86ec3a85e577883d335b63f8910d0b585f4c411f2fe3195e641f963bc7369e6629ce34130493b29ffba1bef0f1c91d53d28c0cd9de7d8aba4e2c39efa1a032b21939ab3e8869bbf1440f68e1d33b21c49499c914915936229f189f2b3ab106266866d4d0ad61fc70213d2872367444a3a8fb85e8ec2f3fe7ec1b6402344a059db09e89e550bbc88439b267f2803086"}}, @rann={0x7e, 0x15, {{0x1}, 0x40, 0x3, @broadcast, 0x8, 0x91, 0x80000000}}, @link_id={0x65, 0x12, {@from_mac, @broadcast, @device_b}}]}, @NL80211_ATTR_IE={0xc, 0x2a, [@cf={0x4, 0x6, {0x9, 0x4, 0x7, 0x4}}]}, @NL80211_ATTR_IE={0xc3, 0x2a, [@random_vendor={0xdd, 0x80, "ebf68fe34a262ad1d8083968f0a7e6893848abf4937444ceeaa064a570f4676194c009828dcb757258638ad27a601f3d159de626cf04430710ccfb6c7b3f9e976793999a4a2c16145c0c67bf2dfbc103c96680548f9a372f89aaf27f62f95c5c29a6cb6504ca83b320561234c18c5cff73f88c4f6778549380a068d9abab024b"}, @challenge={0x10, 0x1, 0x4c}, @peer_mgmt={0x75, 0x14, {0x1, 0x2, @void, @void, @val="d45930ce9bdbf0e4223b56c8221c2dba"}}, @ht={0x2d, 0x1a, {0x800, 0x2, 0x4, 0x0, {0x9, 0x39e, 0x0, 0x80, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x8, 0x90}}, @ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40000}, 0x8850) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r8, @ANYBLOB="0a0034002202020202020000"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 00:12:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x4000000) (async) 00:12:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r6, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x19, 0x34, @random="a57d727d63dbf0cc6fef5b44e9822e98f600000000"}]}, 0x38}}, 0xc000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x36}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004011}, 0x4000000) 00:12:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x5000000}, 0x0) 00:12:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 00:12:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r6, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x19, 0x34, @random="a57d727d63dbf0cc6fef5b44e9822e98f600000000"}]}, 0x38}}, 0xc000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x6c, r4, 0x220, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x73}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x54}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) 00:12:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x38, r6, 0x10, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x19, 0x34, @random="a57d727d63dbf0cc6fef5b44e9822e98f600000000"}]}, 0x38}}, 0xc000) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 00:12:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x6c, r4, 0x220, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x73}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x54}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) write(r1, &(0x7f0000004200)='t', 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x6c, r4, 0x220, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x73}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x54}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async) 00:12:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 00:12:30 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1, &(0x7f0000000340)=""/99, 0x63}, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) pwritev2(r0, &(0x7f0000000700)=[{&(0x7f0000000500)="f8dcf8943c355979a86b14fdd1cef69836c4c342775c16979976b25555ee89c52165154e4bc66cf58953b2030df1bf7cc4ffbbfacbbeabb4d32f11f7d3ee435f6d956881d1b83b65f6bd5ebeadf3ef292ad8ec4b1dfa09cf707339af4a2aef0a861601b2277e752db4abb339d2a1603fc306edcd52d5dd6b6d98f75036cbb16c244faa4224a19d1c5b03fd8ce31eb1e7908d3f944279a9ff4a1238c2d5715b76f2e14938f486c9263296671d95502a499072983f46a727b12640a816d53f00df5e85b1be0442735180edbd3d907e34d9ced689bfa0d86615c34827ddb40263790e3129423f", 0xe5}, {&(0x7f0000000600)="0f503ccbea5f5d75343b7501a25fa4ba068554aa704e0fdf433f1f904cb0e981f3e9319c60d29cc6fff0f33cf104787ff398ada96152522cc47cdaaaf704e8fb5181a4faebf95953e6531da6c042a90fad30a76768f50b474589bd75c0cc78c73d988f651dbd12c77ca703ab441e771fa2629f384ecb974612126459c8964b08369cc0d2a5e3e0a5e2581205de18d36a8ca6173d4033f3c78a7969b47a45f2b4a4447071b72eeacf7520fb9785044ef54ea1bb2009f9cdfdb6d0d1a2da6691b25c517c583d84580fcb52881d7b0f398ed5b4", 0xd2}], 0x2, 0x6, 0xb1, 0x4) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000080003cd3eac00000000ffe600db4b13630bf50f80fdb5c8f5b309b4da33b7177dc8dd8ef7532f966b1b441b7316532067d00e332ef278890d3ae87eca0316787537d02cb624ccb9adee9e94d910a6cf040be492dea86e24222eaebe6a1841c895e1d00cf35d6b90525aa92b294f05db015c3b2f682baeb74fbcfac87ec192edde7ac91fec88371facc1080a0206efc187a9c7a3eaebf164c8c896a7c46ab889fb50ff61d13794ba9352ce6c685c76aa9d41fc", @ANYRES32=r4, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00\b\x00W\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) 00:12:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e000000080003000d8b38320879700d71f40ca96ec7ba0c0ad130feaabd80e4adec7bf76d45dd5d37d4615945d9eb78bc1a10c2490224c930b3e547e3389a050f7f11dd4510fe30491c0f19cf41296c", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x6c, r4, 0x220, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x73}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x54}, 0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) write(r1, &(0x7f0000004200)='t', 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x6c, r4, 0x220, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x73}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}]}, 0x6c}, 0x1, 0x0, 0x0, 0x54}, 0x80) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) (async) 00:12:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x6000000}, 0x0) 00:12:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) 00:12:30 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1, &(0x7f0000000340)=""/99, 0x63}, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) pwritev2(r0, &(0x7f0000000700)=[{&(0x7f0000000500)="f8dcf8943c355979a86b14fdd1cef69836c4c342775c16979976b25555ee89c52165154e4bc66cf58953b2030df1bf7cc4ffbbfacbbeabb4d32f11f7d3ee435f6d956881d1b83b65f6bd5ebeadf3ef292ad8ec4b1dfa09cf707339af4a2aef0a861601b2277e752db4abb339d2a1603fc306edcd52d5dd6b6d98f75036cbb16c244faa4224a19d1c5b03fd8ce31eb1e7908d3f944279a9ff4a1238c2d5715b76f2e14938f486c9263296671d95502a499072983f46a727b12640a816d53f00df5e85b1be0442735180edbd3d907e34d9ced689bfa0d86615c34827ddb40263790e3129423f", 0xe5}, {&(0x7f0000000600)="0f503ccbea5f5d75343b7501a25fa4ba068554aa704e0fdf433f1f904cb0e981f3e9319c60d29cc6fff0f33cf104787ff398ada96152522cc47cdaaaf704e8fb5181a4faebf95953e6531da6c042a90fad30a76768f50b474589bd75c0cc78c73d988f651dbd12c77ca703ab441e771fa2629f384ecb974612126459c8964b08369cc0d2a5e3e0a5e2581205de18d36a8ca6173d4033f3c78a7969b47a45f2b4a4447071b72eeacf7520fb9785044ef54ea1bb2009f9cdfdb6d0d1a2da6691b25c517c583d84580fcb52881d7b0f398ed5b4", 0xd2}], 0x2, 0x6, 0xb1, 0x4) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000080003cd3eac00000000ffe600db4b13630bf50f80fdb5c8f5b309b4da33b7177dc8dd8ef7532f966b1b441b7316532067d00e332ef278890d3ae87eca0316787537d02cb624ccb9adee9e94d910a6cf040be492dea86e24222eaebe6a1841c895e1d00cf35d6b90525aa92b294f05db015c3b2f682baeb74fbcfac87ec192edde7ac91fec88371facc1080a0206efc187a9c7a3eaebf164c8c896a7c46ab889fb50ff61d13794ba9352ce6c685c76aa9d41fc", @ANYRES32=r4, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00\b\x00W\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1, &(0x7f0000000340)=""/99, 0x63}, 0x100) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) pwritev2(r0, &(0x7f0000000700)=[{&(0x7f0000000500)="f8dcf8943c355979a86b14fdd1cef69836c4c342775c16979976b25555ee89c52165154e4bc66cf58953b2030df1bf7cc4ffbbfacbbeabb4d32f11f7d3ee435f6d956881d1b83b65f6bd5ebeadf3ef292ad8ec4b1dfa09cf707339af4a2aef0a861601b2277e752db4abb339d2a1603fc306edcd52d5dd6b6d98f75036cbb16c244faa4224a19d1c5b03fd8ce31eb1e7908d3f944279a9ff4a1238c2d5715b76f2e14938f486c9263296671d95502a499072983f46a727b12640a816d53f00df5e85b1be0442735180edbd3d907e34d9ced689bfa0d86615c34827ddb40263790e3129423f", 0xe5}, {&(0x7f0000000600)="0f503ccbea5f5d75343b7501a25fa4ba068554aa704e0fdf433f1f904cb0e981f3e9319c60d29cc6fff0f33cf104787ff398ada96152522cc47cdaaaf704e8fb5181a4faebf95953e6531da6c042a90fad30a76768f50b474589bd75c0cc78c73d988f651dbd12c77ca703ab441e771fa2629f384ecb974612126459c8964b08369cc0d2a5e3e0a5e2581205de18d36a8ca6173d4033f3c78a7969b47a45f2b4a4447071b72eeacf7520fb9785044ef54ea1bb2009f9cdfdb6d0d1a2da6691b25c517c583d84580fcb52881d7b0f398ed5b4", 0xd2}], 0x2, 0x6, 0xb1, 0x4) (async) write(r1, &(0x7f0000004200)='t', 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x14) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000080003cd3eac00000000ffe600db4b13630bf50f80fdb5c8f5b309b4da33b7177dc8dd8ef7532f966b1b441b7316532067d00e332ef278890d3ae87eca0316787537d02cb624ccb9adee9e94d910a6cf040be492dea86e24222eaebe6a1841c895e1d00cf35d6b90525aa92b294f05db015c3b2f682baeb74fbcfac87ec192edde7ac91fec88371facc1080a0206efc187a9c7a3eaebf164c8c896a7c46ab889fb50ff61d13794ba9352ce6c685c76aa9d41fc", @ANYRES32=r4, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00\b\x00W\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) (async) 00:12:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="49ae0186b3b8f4188c2240eaf2d09fbad99a69746d2d82219db99186b33bab119efaab91d652278af30cc68cfa1e51d0bc7858f870f726963fa7fab68723e46562e3a2a37a3e95333a06e3b92f3cba2d8108fd335fae15b84228fc685c07e07324e362b5654dd0863dd70b9006fea2870dd228ca85b963e7f759b31817491b86bc", @ANYRES16=r1, @ANYBLOB="080029bd7000fcdbdf250b0000000c0099000600000034000000110007007e2889af2ecfab5412516f36780000000a000600080211000001000004000b0004002800110007006720c447d4cf4eaf785ee35b7800000004002800080037000100000004000b001800508011000100caa347858cd49b28448528ac73000000"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x20004000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 00:12:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e000000080003000d8b38320879700d71f40ca96ec7ba0c0ad130feaabd80e4adec7bf76d45dd5d37d4615945d9eb78bc1a10c2490224c930b3e547e3389a050f7f11dd4510fe30491c0f19cf41296c", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 00:12:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="49ae0186b3b8f4188c2240eaf2d09fbad99a69746d2d82219db99186b33bab119efaab91d652278af30cc68cfa1e51d0bc7858f870f726963fa7fab68723e46562e3a2a37a3e95333a06e3b92f3cba2d8108fd335fae15b84228fc685c07e07324e362b5654dd0863dd70b9006fea2870dd228ca85b963e7f759b31817491b86bc", @ANYRES16=r1, @ANYBLOB="080029bd7000fcdbdf250b0000000c0099000600000034000000110007007e2889af2ecfab5412516f36780000000a000600080211000001000004000b0004002800110007006720c447d4cf4eaf785ee35b7800000004002800080037000100000004000b001800508011000100caa347858cd49b28448528ac73000000"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x20004000) (async, rerun: 64) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (rerun: 64) 00:12:30 executing program 4: recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/82, 0x52}], 0x1, &(0x7f0000000340)=""/99, 0x63}, 0x100) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) pwritev2(r0, &(0x7f0000000700)=[{&(0x7f0000000500)="f8dcf8943c355979a86b14fdd1cef69836c4c342775c16979976b25555ee89c52165154e4bc66cf58953b2030df1bf7cc4ffbbfacbbeabb4d32f11f7d3ee435f6d956881d1b83b65f6bd5ebeadf3ef292ad8ec4b1dfa09cf707339af4a2aef0a861601b2277e752db4abb339d2a1603fc306edcd52d5dd6b6d98f75036cbb16c244faa4224a19d1c5b03fd8ce31eb1e7908d3f944279a9ff4a1238c2d5715b76f2e14938f486c9263296671d95502a499072983f46a727b12640a816d53f00df5e85b1be0442735180edbd3d907e34d9ced689bfa0d86615c34827ddb40263790e3129423f", 0xe5}, {&(0x7f0000000600)="0f503ccbea5f5d75343b7501a25fa4ba068554aa704e0fdf433f1f904cb0e981f3e9319c60d29cc6fff0f33cf104787ff398ada96152522cc47cdaaaf704e8fb5181a4faebf95953e6531da6c042a90fad30a76768f50b474589bd75c0cc78c73d988f651dbd12c77ca703ab441e771fa2629f384ecb974612126459c8964b08369cc0d2a5e3e0a5e2581205de18d36a8ca6173d4033f3c78a7969b47a45f2b4a4447071b72eeacf7520fb9785044ef54ea1bb2009f9cdfdb6d0d1a2da6691b25c517c583d84580fcb52881d7b0f398ed5b4", 0xd2}], 0x2, 0x6, 0xb1, 0x4) (async) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@FOU_ATTR_AF={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000080003cd3eac00000000ffe600db4b13630bf50f80fdb5c8f5b309b4da33b7177dc8dd8ef7532f966b1b441b7316532067d00e332ef278890d3ae87eca0316787537d02cb624ccb9adee9e94d910a6cf040be492dea86e24222eaebe6a1841c895e1d00cf35d6b90525aa92b294f05db015c3b2f682baeb74fbcfac87ec192edde7ac91fec88371facc1080a0206efc187a9c7a3eaebf164c8c896a7c46ab889fb50ff61d13794ba9352ce6c685c76aa9d41fc", @ANYRES32=r4, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00\b\x00W\x00\x00\x00\x00\x00'], 0x2c}}, 0x0) 00:12:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x7000000}, 0x0) 00:12:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="49ae0186b3b8f4188c2240eaf2d09fbad99a69746d2d82219db99186b33bab119efaab91d652278af30cc68cfa1e51d0bc7858f870f726963fa7fab68723e46562e3a2a37a3e95333a06e3b92f3cba2d8108fd335fae15b84228fc685c07e07324e362b5654dd0863dd70b9006fea2870dd228ca85b963e7f759b31817491b86bc", @ANYRES16=r1, @ANYBLOB="080029bd7000fcdbdf250b0000000c0099000600000034000000110007007e2889af2ecfab5412516f36780000000a000600080211000001000004000b0004002800110007006720c447d4cf4eaf785ee35b7800000004002800080037000100000004000b001800508011000100caa347858cd49b28448528ac73000000"], 0x84}, 0x1, 0x0, 0x0, 0x41}, 0x20004000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 00:12:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3}, 0x0) 00:12:30 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e000000080003000d8b38320879700d71f40ca96ec7ba0c0ad130feaabd80e4adec7bf76d45dd5d37d4615945d9eb78bc1a10c2490224c930b3e547e3389a050f7f11dd4510fe30491c0f19cf41296c", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg(r6, &(0x7f0000000300)={&(0x7f0000000240)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x80, &(0x7f0000002740)=[{&(0x7f00000002c0)="a07c5b0c31a3fab563cf23bc12f8a35d14aece", 0x13}, {&(0x7f00000004c0)="101d17a40974d648e7d29d17dfb2e8484f39ccdfce76370514fa617df4f8767229af686d0754bf81132fbea628bb6d049092a7a71f43d8233118618539dc44a43abd88ae5e3f267bdd159967ae1c4256df8c6b774abe193132a48cc368d93f7ce6cd909f34ce237a4d6dcc30caf037e7958da6dbc5b3d4b4e7288ef4f77c6159407b", 0x82}, {&(0x7f0000000580)="025381b29518e96a56365dd4d629ba551e3464af016bf796168599362d701ced7ac5769af96f3f27e95bd6ec90cfd7b1b63a26d178744539b0dd7bbc55dd0671ccde187c8b089242086c95bd9d265eaf0dae38f99e8418f8e75f1f803d34b5657fb744c666595ff9a586621a61974e9f222de350489d74caaab32ec0aeb4d5c19074d2124772db9269097d43a602", 0x8e}, {&(0x7f0000000680)="b327b2faecf9f762ff7c26296ddfdb65d5466f83e2e8560a8038a1ae05b9d6359fd6fcdf7616c9b5703edcfca61ff97686fbf11e2c3e3eebd986fb9d80b8373c9c12eab9ed037303e9c3fff96a63279469b23bc98ac26d87686da637dd251b6412841a6cc76c81bb248a64038ffeb79a6a23462c27374a8636babde012c3c12223228b934d9783935f50aa7db264cec61086477856498d891fb2f9f62ca325616a8779e44f18e208902b3c3220c28f33c3ebc61925603dc3444369f80a591ba0c2ec4fc65eec24489243624d03757299c4c2d4f95e9cfe5ebb1e4239dcf9ca29e02cd253a3c568a38fd1d8ccb31788ed76916320a0032bc16321ee9b4de623a9ba57536eb85259f99ef9ef04c6070c9cab7a50b4e3a915bd044bd631380e60cae41fc1770bbae03fee2c7a127ce2c2d43565ea9c5cd222fa596bf43fcbc9db0c6f295906ccfac7716de9a41242892c0e8483e488d0ccb55c4c38fdcbd939da5f997dac9d467fbbe3f9911c0fa5e47adbe625b3d913f028efbfb51d0cabaf428fbe9b3ba8b160148e2a7078468e7103e79d003725fbfcb4c5e93fdd15f4fd22e8f7422ad43cbe22cc06057f8a95617148dbb7f546151a091af025b9e30ee67563e7aa14540d1cdc9f1c85bfc4d9995b6e21758267afc8435ba667198c085893a7fe74c340f0f5b283f7f24bb356ca738fa07b264293caafc37a7b61a7a465cec313480ad765d9b4093c2076cca2bfb201c237e25c01fb5bc68f5c9615637514bad5a419d5cddc9075dd84880ae79d8e170faa861ad6056066a1088e12611b04efb785ae8711267cd6281a19a8158c5a50de8171cce15e63d1eeb090a636ff33e035377dd182c72fb5d973626baab49fafa509018e859d893c1b9b4022c97c1a19b2e2052aefdca6992e9cb1c32ca426c88bb0b967e6f04bee15260ef9fec6ae9ffa88b925286fff9d89e83948791c918c9a330bb597a9468b39ad3d5db0b1c684ccf624bdb296d52ea4552949e1c580e0862dd73b8c58a3125ada65d2889bbb7f91ad09d0ff335ba3ac50e5ccf1d71fa32d45ed19897d7fd136f1e878567b2bdd17195f765a76d340efb7ae816a339991afd9612f38a39df94ca5188125bd6075ee12fe41482644ee09f2aa998ad50ed97daa9d7771cc3a4b9320be6503b1c76f44e2fe29e03fa9ef3779d54229e9097b811aa54e8b3de8e0f717b6678e383614a832f02a1e3a5802caddb456ae429cde5b86eb617a97853300afa59a7a0a7f83ce66800d4966dc776896aebc048b504f7e9c7f61fc12d7ff0422dc7d8d08b095f2e5b68662ad61b9d7b93951832ad43322de1189f1ddcb4cd587b31281537b2b0946d05234528d401c56bde3412a8caca980cf38addb8595e3c162d4f823553f7cc2d6889ca0e6ce83d320f4438b82587fc8d204ccb3f945e28966d9c913bf16e5571a2ad8ac4985d7b57c7edac8c407950c5f74906490c466a99abc68df96803cc32e6f4c1443b97f0b6af11a812c82eb717aae0a8c81ea56237fb2f21e7c0c4d40ea8e6c234f323edfd3142f764167eb6b2491f49003236b982179a7f8ad1cc38bf20b273f4625006ee45827413af94c8a8ef2257a01e75e60f317ccc2fd7283745bb93d0a0c62b888b98c3808228e2d54815712a9cd7e80f7a80fd7087b08d52c23918879e8ff1a1ecaf10ae7598f1763b297e5c57f506968606f51b70b096aa0af93512093a5c038f25ec7210221340bd556efbd8fa8db5d78865f5c443e8faeabbf155374b33195858e781eece1f0362abc78e78efcf591cc1ebaf12a7de139eefb73cc50822d1bd2dff65b9f5949f10db1d31e38833215132c2fa04c90febac9120b669235198ff27b81e8c01dae13febac7f0279e94e5ddf28cd500be2ff44279e1662f2d3b3bf0708911c1a9523b5a740bebf5862426582a8f5a5458814be17f07c8d0f3da191a8bac408a5cf624bb2aafc43892cb19ef0a1687b7290b4accd7186a680ad908fa7eedda9c7a1c21ebcd857756a08276eebd3eff7867702b7e6296bc9905f75639d1f9e184fc227a7bafce7059e017d085592a41fc01c1088dd1d23dc8492d1ebf0eb1ed96669056012a2ad654935465d26d6946a4d188b4181fbccb35f83e89197c11b0acc2db0f10a8d2ec5378d60d12129729b4dec7a6bc8c6adaa066b52ee350498f244d5bf2c2dfd93f19260ae12e54327186a9a01a434104605e55daeff95556bc4df611cdf276ee90fb75f77b63eb9fd7283cdf849c9a5aaebfaa72b5d9217e0f2e7f8702f90f2cdbab12b7a115b9844928a7016c6532215570cd3ca0a432f25362ea65e0c072e4988c369c75d5826b43c1c61f2594083ff27eb89e350a098b4309a39a85f8d6639954be2e58baed9c69e7eaba06af57f0d5aa947f568a1d34806664d295bd73f299df049e19cfe0caa6fe48881585a2ef14955a4efb29ad9b643a488c4ffab34bd32426a921358bd1ae5f19dbeb0f3e3537390c1b0ef20a768cd5d226090b2bc88a4ab5efe699f1858db881efffa09921baec6d97a0ff1dfaf0b9cc41793ea152e92a0ace169d340755988eee0b8514006ce4d95efd40f5753592bab5757033fe93093ab2527658b19bfadca4bc8d07ca62442c0a7c0adc0a8bb918720a411582e9aab43c3fd39412a98c0fb975fe6cdc7d5ed92e89800b1524a272990e1e395159d9a3e34fccd4d23fe460a42ef3cbd876cea5c58ff0576b2b6170da1edf5bf96691129d7c2897de8c013998ddffda3c93c78ff91ec944ff5e133a25147abb43e65bcebbd7801a7889d9e7afb415c53bc28cba1db8a57c215403f46c443f356727a761733d053f35528d45935826121db3defe2fa49f23666d287c3bc6b994b68bd7bb830acc300aeef346fea56ca2e7628f410b28b892d20a89dafc6aae6e0a7b9b033e1dfa295ef6f27ad4cf4a10de1a3258288d244f229dbc29e4f035b0ea54ff393f316aa93c1a061a6fce942dff348b48c4cbcf87085e5dd5ecb5655ff41ddb1a3a1d8fa106be6a80bf2f96acef235060e2208f1d2337f7e8027c54d7acf5a368bb5dddb37c9bcd438cdd50229ab0aeb393dca423902035f62e97a5e15cd3ebc520297a902e946841f476b93a09b81103c7779da6a70d0b883c91ec2cb6e8a67e300ed84d8d270515a78b479b11b3b4976e6009736eda733ec86f26f95ec8f8292ff33b11c0e21a2219014d7e27e5e045967e4791823ff528cb8c2e8aac71710c57ea913b8c4d57e383eb1eaa69612056120d2701b17052c6dbbc185e3bc7662d5bdb098339d05212f0820d9d82a0d5e9ff67ca958d983f7fcacf8295e40340dc795e19f6fe82b79714f42f6ae724611b48313ce03511ed2c247bf95db749ea7b2f5dbc5514c1e04dd48c4f861ae08a72bb393a8992bf8bacf9fdd1e895192d1f7680549673bcc5e5f38890554491cf0265fb5352e80f5683b9fd104fb5a3ea6106093556be8bfddab3bb9f6f44a000f6412a06841ce7adda4b368b3b24b46c4e429b0bb050341dc5fd3afec8a914c1d507b119ed7130999f24c5c499f5ea5797e73b34dcb2533b186dbc3bfe6f2c6dbeb9204aa73c2252f541f95c46e5b9f87dc2bf15261d83788d06ca676b1d73016a2b202e909aa0887df8fda66190c52fdc2e9328a08a8a58027af1815420c88183e601582bd73cc5bf572fb774c52901492704a7ffe81bded2d7f1e29f49c2016f8019817f6327fef25dcd88e5f6bee0e425146246cf2857ebd1901de1bf468bf5a3e8f08f5f9e9cdcb783fa5902b5e4c98fb5639980853a607b440db002c87155ad9bcf76332fe5aad529397baa43ca0e33d0a48f6def2ac5514e2a0f8341ecaf2cd6913db41c61e98f181a938c1fbb3a13d1cc0d4386686c0ae1e27a5e74154f6ed1b92fe7471c20415211aabe4d7d7c32e56496883f73267c74e75e49a49eea738b5fc5fce74969af139e97d25bf18ee833b1793ca563476bfa3366fff6bcc0f45f66bd33280cb41ff2f61d53c4f23279036dbcb79fb52f084099b815455c9e3c3807977bfdc92071a0ebdf1c19f2b1762212190df25fdfc0a4aedf5aa56f98c76e95293fdd44a95e067b8e11bacf585912540dccbb0a81dd7c78f2471615f2f24d1513b621ef33a7eaee59a82674e6d1ad6b295fb1b18c5fc5207df9d79fe3305a4bf131bf04052ffddaf1b343a5ebb3c691cef9eac6fa9f0493209f0b5f12406fb0d9a15a1c4f404aabe2586dbc1b0ce92ba5ff956a3675df9f3474179276744e5a5eccce326269dbca78948b938ccfc2672cebad2c10a8d1a7553b8d50e37785384ca6dec22c238cc39d023405a5f3a8e21e50fac1fd244e82e238d25133b9eeb8cd61e980af7df735581a6b44fe5cff0fb6f150ee09ef1dbb9f311599f9e393f1dfed513fd9f5ccd98fa36ddc43da7114b9eab61536dcad9f5a0b8ad7abd2c1ca4f3b60e7a0d81ceb939853223157dd95b2adb86b4a73c57199021325fa7988a2efae5538037f84de08b876f343861aed9f9e0f246925293e0f222aaa5ae72ad84266247008bb1639e6a7fa20c6e8d859330c1091dbf6129d23b4b5b326043445f5f5f7dd24c828ea89df7fef8527a2b67f02f946eedf5e2c6b29e4636003fc788a449b7222b97038a1ea58e0222cd7e7dae3072fada6778ccd4106e140279f399b5cd1580239e14c5199069c83b31c15a53bd0a4137a4d9c46dfeee3317b84e6973bb1e351153fe20f02f30d650486fbfc54c9568a91607294cc30bab2d0162ff7fd0e702f5b00c879edae92cbdf4829791e6077bb4ddd2b2333415750cf3a3611a1341fc5497a4471b6fd18bfdf833a06f49ea8539b0c83ea8a54141791bd9ac8dbba6c8a3d69e2c55ef4459efee7455a8f63854143193df44d14152f7b8db1699d672f950a10095a2814dc207cfa43e635c50430ad6af6948b1693e8357d01991151b9f0e272a0aedd830e0d38594212b10079baa1401a31a0f471e1d23db66ca1f22deed8ceb7d5919dcb350e6e26d73cf627d1e7daed3279893c117c78c81999e80c5eab80693f11e7f19406b96d328622cbf707cd02eb5cf919dcf363f6b7ff571fe45e262ff4b39b0af01ba72ae52ca5e85830b4745627956a82b45fe4c8cb862cc0665bd906205fbc8a7538431aa42a1e1900035604073d9209511795cf58e08d9b47107b2d5838e64bf8b158870b63314413cc5d7d440830d2ae98509bf0744d264ad0649d56ce537117a0748c19c9c35ca8f90914dbf7ee2932efc632acce3d7a0d1da8e0612a58efa090469c1fb39e0c43a96b14e400c0aee246497f471c66dc4d98fd8ee7ae48eac5ca30af517c9c2cb5530ca3c2037e8795db48f067ea03f83f7f49d2a89338f7fcc0dd547cc55b521716ded9ff3bf7b35fe7b18cfcadfee3e821c0942d9a5024ead6abd52a2bc3037149a41df5c40df5c94caf622a6347931ff256e26a4c7e407fa9e3f9b14645ff428a9258d917fc0ded93326f819ec7a1c968565eaf08b797599c39c8d0fa34d237f2291a0d01a0e329afd39febfc2d58fb4c55f00aa4c1452667bcd1a0fcf408e8e3575a1c3c6a62d0df489338efb44783f6dc5f71516e3558aa94a56546fede86bc6531ce118124874697729a8af81f5d7072f6c36dc3cd715b69e59324898a573940db21b97a2829d7a2e8d03f79e787881b2212fdc09f311c4c3d1eef6f01e9d08288e3fcc5d9a85f930c69be07da9698196a9708a27d6fda36d753ec2b47127c7397e7bdc3b384ad297abbab5b6663207107eedb5c73ada3cde65200deab", 0x1000}, {&(0x7f0000001680)="4cabc08285a1ec6fbd27e31ba57512f881a103d1464f0b5e6062a31de8d43a24f7d6dc2d507d361684ebde341ecefa5f24f5a44c0a7c136b6e65a870af7bb69bcfe7eb19331022b6d3b0dc59e053a1323a01fe96a79d96e159c2b7f33425fe38b1e92480b4a81c1ebc29c0e1522f18d80bf6262c8509fac575392048e4fbf74c03f5dcd322943d725f2b9106653a60c386918a9bf75cca613c9cb9a4f923b3757a34557614e5062bc2c620bfd19bd2669814080473", 0xb5}, {&(0x7f0000000380)="ad4b02838cb4e4055f2a42d06f3882b83db16b15bad24e6ed957376ddd7a1cecacd52d1ab0d39fadf4618631d46d360de3a590673964ba5cd5c140ad6343cb4a492e59b89e10ce355608af893fbaf6221403b8dd2b444b6d9dfaf4aa4750", 0x5e}, {&(0x7f0000001740)="3ac310d1f981b5ba85208b672297fbc64b669c5d671d0dcd8b0fd429115a8a924946314c35add45f60ed57abf12da0671b648c58d03c4ac869380f0309bbf8e0ff74dfca29f7bf27fe0ff45ff34df80cbc094b12277ce0a3fd6864005e8c15d0036ebf24ddc171b122f33319193b6a461301c2114d5256fb0bac742dbece06425a60643e57637ad088316ec4a630694d38ca129f4678a4801ef59b9d7ca2d8cbbfba29a8b4f32d83d57f6ad4532316979dff490783904476b198782819cc271e83b04a9b77387f3cead85bf423128e8637ce4d7720469671612554a32fd71ba0072e1bbe72a5967e8e3c69d73ae5b41a89a7413f262bf04754c84fbb5c0733400373bac7fcc7d35199c0cd52a7e3de057e429ea66a13ec4dc2279efa42586e4fb276adaedadbb4f58a4ec259d73bd5463ea4ad946ca6b4c33abd61044fbf13f268fa0fda378688f688ebbdb1ef79791fc31a1a55dc2179612ad055436b51ad5bb0daf21f4d4b73b77f2bb9e236741000ae378d8e1f3ce567556efdb02c84aacfef84b03ec7e9213ee625df845074a2b71fb340b8df8a9d7ccf1ed90b5a88892c042cff379d7e298ea49fa944b99b5e018ca10d58c18dfe23a9010574cf18984fb7e5e445ffcf93395285bb0c668c2c53af8a1585fc3abe10c685d0b8bf844e2b40dbc7702b96c0cac6d83939aa5b99e1c0c700b791d93eab8692af43599993ff1c0d34f6242b8b1b8a2438873e1444e5ac182d8c156ba02a89069d486f9390b43398f2714617084ed4f4fb0b304f3b14e019b0126936b0753538b20625218504a0f643bd63a2fdbc72c4fc1bfa72d417ab46255425a52383ea32330d838b39b3e3d4ec14d792dcfe81b53778da6617f9c24c385a3c5a18fec65454ca3dc1075a47df83c23bf39c4554ad1aefddccecc6337cdc807a12b18a76f629e9404855a12bfe7e6ab09eb19c8cc37ecc5853944635503f26b37e2127f609a007d0ce6b61704bc5ea19323f2116dd1a1eb03a5fac507af6329755cb9fe5c6b279db6ccf87b413c96de8760b4642344a76e828d287f5527b0de8cf16dfc06276b6db8227589ce96fb5aabe5d132af16702666f3031ff6514b78768a23cb3024d51536532c895f7b4a4c595a78a03e5fbc15bfd1ac782801012b8dd88697328972be24bef4343fcd823b700b53eb19e0fedecd93c0eabe2356ae954e95185c18058222eb2d78a650d221bf9f7bd44b885daf06191b8f5817b5627c3df9e2620b07ad049b6ca7070fb1235f14fa34d89ad2b05120845fff474f069efb6d703b6b169aff1bf55c0435614060308397633a71962b96719bc46545a8c29ffdc6ce207e91e06af4521276f8c722735a152afecd77ce0cf1999fddae427ff9a958f148d47a35b0a4f3001b8be1bb893b2c4c54b02ee7d23ee3af5cba9f786f3db651b40a5ff7254d6b3f48a188c125eba7e69a62f513a83b3f9a9423042a9e207142f66371bffbfe816e4ab14871ba2f5c16e0eb3de80b9e253aa7db0df83a66e10d49dba46aa295aa24af03ba978a84f42ad6241867c2db00a43b36afdf6ab3cd161e2698680d8581ce0d95996746f7476bd48be6d66135ff0b8f2228dbc2480c3e201f46e8016c451e7f2c16e2f12b392212be0c90c5d97e420826549e66785dcff90d24d8a17a93b42b1d89366ac299cffd1acdb83086a9be6987cba2a87f36ca9412ba49b6c4aeda85a2bec68288192a45ae25036ff71925a81ace68b26fcf5a77a2998833a16f91dbf16d8c345ef42aa046b1490213dcb0d8133d1cc430aa8edae8b4b431e4fedb85f7b47a922809fe4e899f894b98a26f31b3e97ae3954c41f7176febc9cf3ffbf935b6382caf9e42f4e17717aab10620d17426952ba88bc74e8e91fad076df51c176627ebcae8a35a4a85e318321ead1d58d90abf5868b1b8633dc4aed5c99a79f85d295a09d52e386449d9b6b1d8be319760c238b02376c30f9c249f2fa857a55cb7b735462866bea45cf28848984561faaa9ff79985dc2a4c0e2cb94fa093bd443a65fe251923ecec7dab8999c28b71ac9a2c7db831ea1c58f3da8e5b93d0a809b375b1e7ccacf284328d365462cb68ff81efcc074ea1421e2a2b07006fe18d6cb79d352f7385a3d37f3ca1c93a0b6e0e29058f9a48a5f313b35cd3e6e28122228837da06b93d50061144b25ddb954113eba547858e62a6ce069fa8d9dab2967f8d65cc508c04b0f6ee56cdd635f0d9a4ba5bfe17590e7277f2727bcadc111bcc32fafd057e4e0777d767429c4262c1c50eec1bc63004e4ff4af737efe6133736e4eb697ad7d257e8b5774761ce72dcaa3b060b611e05946f8048989ec8bc69451f7b652e72928577ed1ddd828253d4563c3b5da456fc0378ea061ce3eae3369ca3234746dc333e6cd38b596a59e446274130103bf67a065572fd84e2b6a365ca420f9cf12fef33dbc55aeeee4c4bc3cb966f9a32abaeade7f2b2a3fba54abe2a6db001809970cd23e837899ee59064f3b69d04ba0b721575200a534a047cbc46a18fb2b8374876a0ef37653e81c8199edcb2bfcd72637f7babadb1fc4a83ef6d0054cec91832bd881f3c9f1a6b35344266188cc845337ed98f7191e4cf53b0ef7c7ea0ee5a0312dd8b8293b995e9934f9dff3e07ad6bfd92c21b859189fbc23d0db70f9c6514ec7df8deb0c216d92e75ce9324bd3ef643cee671143b618e06380ebdd105464d53abe0faf4a900d6d4acae7135eeeae77b6f969b244b779e6a3a7e28064648b147895b02393a91083b0fa7637bb0f895977b3082602304d3dca4509c39e6692fdf4f2e28af5da0e73bc58d7bbfbf67f2fecfff65899745f2a87a83ccb6c2986a5209d97bfb3c40064469c9644a875cc3bddc4fa1862a31a2d49e58b5c31ddef75f9221a9a416d6752957731e48e4a353a06a7b7d93f80f2ad1cd138e9a8b7964e7b108e10113c8b283705ccd5b1d6b5b51e8b4263d0efbf9a2ebe09c48ff4ee906fe15303accef3d61d9f50b19e9934e17c63a5f68753ab70b1b867706f745fe710ed775786126cb0faee2553d9eff0ce3f31da0b78b74ac58bcdb9ae3b1c2efec3125b4474a2c3b32c1930dd52a13b9c4451d5cc5d0bb1ca206a7ac77b43cf25e52d6d93767ae396479279aef364b2db0918093f11f4ec83f20fa10dd5382507d4cf378e32f96e17e17ab5cfe58ebfe9f5f98c7c7781a0a2c5a41f3aa3252ec6aececdde70bea1948e4b6e0710dbe9ce33d10f55fe51f77a3e88d11ab26ba9a2f9167a90cdf0e77ca16cf69f0b998e54dd190a68b5ab93b406c660f1077d3d62e65c4696cdf43d2f5683dadc1453a274bda64acdca65d87ddf0215d4df58d397e391f3dc4229f60ec5889e4575372635e2708697a3f48ac840369a8c450310aee07fe9f9eea3e5456e8ce4545795ac4791dbb8872c2e416380f02b11e56d1bc94022fbcba23c0a9efbed4676329e441c87ba3b698179ddc2aae3f34fb2f2e259650c8b1155bb94e6b4006e5b3241f3985216d5c6bc162707671303636544b37aaa86f315608f87c3e0db31fce1c49c51e64bd08b344bd9c1a8cd57c6144a53faa805a8c70c84eeeb6dbcc77e19419cd5b018811285fa95554c70dbc27b9be05253f3f4930f0ee5a864b4b08c1a4bb52166013c7cd10b2eb1b1bb209505ae977357bfa40032c41f400cee826cf786ad2a52dcb4d01b1d1eb4d7835f4705aaf8d3025565fe81dada2f0a6556be4aab84a15cedba568f5c573ff450e4c02354bd1f680d1ad7f50b57204f722b28c67a3d27469849197ad141022697768d1bfde427582febc9c3a75688695dd5ece89b122a449286ccbb61c6294cf5b1d67b112eb3fdeabdd828754ffb620ba581e8e7d46ecd1b030265012c569f2b80ddcf82391475c96e6bd928d711f59c66ed435602e2bc84827bccbb451381aa896d0910b35f743180552df80ef5ead9aaaa674fd6a84c8dc1f5c2be4f1f55d87432b1d87782032dbc079d7980ece7b61fcf272e66f96a5d331687eb92e7b805b295b43f5399e0ad8f6f663f23102c677b0613b5888d6cd43c2b81d366e4e41c192592164d4bf920bb259eccb1ad00359a6012ef693ca411bb5450794518b7db801929f45e8dc7c78e785776d908aceafff069a1b98a387265d08388cf5df6b0632295f3dd23739d3f170db800978601738ad0be62a1dd92edb63fac15258a7f22a535cc22f5bc387ed8f6a1609bb1eb3b270d91571124847261dcb34d90220c97ea84f996b4dea704e1b65a569ad3838fd8637bc9dae03e408a9a2a8c681210ae5c4a6f1f5315a84034a7d74a30f0d810bbfb5d2d4b09afab01cefbcab9e9de295d9d59a94bb4d79f17a167a5032fc423a684a570c998e8e4682db480f7fffb298513eaa911706d7293961fbf83c2ea02a45a509139d5c128b3bb3000cbed742d9f5077b03083059b38a070ced491ab9a22773efc0d547a4341103411fe2ddc08160c0341bd20a8b4ca633621a9cd68679a54ef25c48ef4445f8386289ac3cd8ff59ef1150149ec72a89492c8cc4c792d5aa9432e3000287d4a242c6cd82ae5488925d991750733916f9119cb2f9ae13d7d50ca7d8fe3669efe255de164ec96ab5e8bcab0cf1e3f5c777d23e38d024d255e64c210ed4d27b08fc2f75c7d224a009bc647a321fadbf80431e0a2f5b5e7fd96f75c8963f59c750ba67e009736b2ae9bdd2a011b25c787d3871ee73cb59f60124561b86656b7ea0418ddbe442ea091f338bdc9f6830744bd90f4d6768466e87cdb26dd559602e94f5eeb23412e4c570bb50da0057b562656bbba35eba5881e94ef371ffcbe550b6df6ff9014bd15ee4c0aeeb0ff2b1071d0baa11109b43dab3f4472fcbc1a53cf4cb5f62dd9bf800e2bd9a87916621e63ba9ea69654f24ed393ab278e81d57618048c0b87ace8559ebf70f69f1750bb5e0c06e5c97d1dc5456b789f063586b287e1e8d622830b1afa6771af48355761eee6750e668e4fdc8715003544f931840fdff03c81ea3d757fcb5231e5947a8c3ebe37c39ee27ea5d4e15a38f970c4e88237a057062d74e89d33532a5245ac64657bad0709b27271d9bc3d343b359fa8395496d4af19394d89f50bdc16870d6ba9905e6f6891c7ae79057ef288ba24d381ded82d6ce88732b322dbfa79e30de6479116992c24294f085258d258b9b52667e54276642fc9ded5bbfe8882c4d44d6cacc59bf2bfd8d0bc62f18bb859d81f88af953b9900f4edb2bf19fd947d299cf7555c6579e0b3b224587c7ae24ed79ac22efaaf6273d92fde340b5b58019770bec8854ad02958727815ee7d03f391a3fc7e3028d3e75915db516eba4c36ee3b7ceb280a8fffeb62b55f469763d7299bc1626c9d992a5bcfc2260615369ee5a43ca472c908ce535ad0291e7061f5cce7c652eaa4abb9c7b72f0acaebadf0a4565823417b76a11ea255edfdc0aa45bc3b629ad99e7bf6592dc05586fdf35974fc2fa6888a51b1666eabeeb72cb963becdeb6c87aaec9aebc83a4f5d222483962cd7b3bf7b2312d084c9aa8f656e7f7f82f1ee0f273052d6d7dae57c69ed7e713d09fef439a329bf29e11b1da6eed98cbe41858a83d021506ad3e510bb724b512ccd19946ba22d77dd5a9dd5e7533a7002dc46407fb6a83d1acdd9662c706da50de17de9209b07fbf7c4bd6b2b58166692eea5b8155f9d3f36ce83049f6c3f041384b71f41229824f4451fc46b76668aad8822e145d44f7fe99e9f07cfadd5e58d566008f2f29b693f637d5d84971c050db8b8affa7", 0x1000}], 0x7, &(0x7f00000027c0)=[{0x50, 0x10b, 0x8, "d38b421b98f1d129799c12124a33c4830f973fe71bc0919c79d4605f1b79b21d799302cbbc2e032d08acbf724ed84dc1fd30a649f26e639fe10acc123e"}, {0x20, 0x29, 0x5, "994784692e97c2864880ac"}, {0xc0, 0x117, 0x8, "ad3e4fe9ee508e9a2c4a0940819b7af8d26ba9190c3a352ec77391eecf7343dfc45264eaff4f325a7cfd96052e7a975a71ed2fba546f15439502b0036985fca5110b793f2ef6c93dfe7356d26bbbed635941ce333f45d4064e6d1a3b345fde02c53c34fb441bad5286deba9b00ebcf9444e8cb319e2b8522785e7a36f0d58d89ff37202d4986b36980194420b09ea1e8570b7ac410f7b76cbbb47636ed8b5962e9cb3c63e038013ce739c07f8ce23912"}, {0x30, 0x10c, 0x21b3482d, "6080f602017603b8963e9e47158506f011d2f9d78fd8e75226a788b95164"}, {0xb0, 0x1, 0x4cfe, "70f486e82929e1bb64066d7dbe055126fcb74701637474fc44bb6038176b74a515ba5fd7f375746367fd83d610f32c094f61af60d01147946512a2b1554b94b1327d619a0a7ecca2082d65ad18e11600a28cd751c3d0bd3f696bb206a1434ce29d59f9bf6cf49e412a5a31a1fbf7ab7b21ad990a93d57729e0be77d97770f8ec7fcc16a34c77ceaa558ca3821dc359341d0ca7b80f84a611ba6478594d5ca0"}, {0x48, 0x118, 0x80, "45f0363a2df7db8278a57b38352358561aa8372c38004de8a30cbfcc17b697e53531d5305322f0c983a52a53cfb54b86528b4c07f2"}], 0x258}, 0x800) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003cc0)={'wlan0\x00'}) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000002b80)) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98570100", @ANYRES16=r4, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x6c, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3f, 0x77}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7d8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x522}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8840}, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x66}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe44}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x2, 0x0, 0x401, 0x7, 0x5, 0x4, 0x1]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa9a}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x105a}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000003c80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x20, r4, 0xb00, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000002bc0)="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") 00:12:30 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) fchdir(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 00:12:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000024000b0f00ff00bf4298bde2880a0000", @ANYRES32=r11, @ANYBLOB="00000000ffffffff0000000009000100677265640000000014000200100003000a"], 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab6d73d47dae0927}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xc0, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x65a}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x840}, 0x8880) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) (async) fchdir(r0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 00:12:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:12:31 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r0, &(0x7f0000004200)='t', 0x1) fchdir(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) write(r0, &(0x7f0000004200)='t', 0x1) (async) fchdir(r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) 00:12:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x34}}, 0x4000804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x24, 0x25, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x2, 0xa}, {0xe, 0xffe0}}}, 0x24}}, 0x4004080) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 751.298295][ T5206] __nla_validate_parse: 20 callbacks suppressed [ 751.298312][ T5206] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg(r6, &(0x7f0000000300)={&(0x7f0000000240)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x80, &(0x7f0000002740)=[{&(0x7f00000002c0)="a07c5b0c31a3fab563cf23bc12f8a35d14aece", 0x13}, {&(0x7f00000004c0)="101d17a40974d648e7d29d17dfb2e8484f39ccdfce76370514fa617df4f8767229af686d0754bf81132fbea628bb6d049092a7a71f43d8233118618539dc44a43abd88ae5e3f267bdd159967ae1c4256df8c6b774abe193132a48cc368d93f7ce6cd909f34ce237a4d6dcc30caf037e7958da6dbc5b3d4b4e7288ef4f77c6159407b", 0x82}, {&(0x7f0000000580)="025381b29518e96a56365dd4d629ba551e3464af016bf796168599362d701ced7ac5769af96f3f27e95bd6ec90cfd7b1b63a26d178744539b0dd7bbc55dd0671ccde187c8b089242086c95bd9d265eaf0dae38f99e8418f8e75f1f803d34b5657fb744c666595ff9a586621a61974e9f222de350489d74caaab32ec0aeb4d5c19074d2124772db9269097d43a602", 0x8e}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="4cabc08285a1ec6fbd27e31ba57512f881a103d1464f0b5e6062a31de8d43a24f7d6dc2d507d361684ebde341ecefa5f24f5a44c0a7c136b6e65a870af7bb69bcfe7eb19331022b6d3b0dc59e053a1323a01fe96a79d96e159c2b7f33425fe38b1e92480b4a81c1ebc29c0e1522f18d80bf6262c8509fac575392048e4fbf74c03f5dcd322943d725f2b9106653a60c386918a9bf75cca613c9cb9a4f923b3757a34557614e5062bc2c620bfd19bd2669814080473", 0xb5}, {&(0x7f0000000380)="ad4b02838cb4e4055f2a42d06f3882b83db16b15bad24e6ed957376ddd7a1cecacd52d1ab0d39fadf4618631d46d360de3a590673964ba5cd5c140ad6343cb4a492e59b89e10ce355608af893fbaf6221403b8dd2b444b6d9dfaf4aa4750", 0x5e}, {&(0x7f0000001740)="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", 0x1000}], 0x7, &(0x7f00000027c0)=[{0x50, 0x10b, 0x8, "d38b421b98f1d129799c12124a33c4830f973fe71bc0919c79d4605f1b79b21d799302cbbc2e032d08acbf724ed84dc1fd30a649f26e639fe10acc123e"}, {0x20, 0x29, 0x5, "994784692e97c2864880ac"}, {0xc0, 0x117, 0x8, "ad3e4fe9ee508e9a2c4a0940819b7af8d26ba9190c3a352ec77391eecf7343dfc45264eaff4f325a7cfd96052e7a975a71ed2fba546f15439502b0036985fca5110b793f2ef6c93dfe7356d26bbbed635941ce333f45d4064e6d1a3b345fde02c53c34fb441bad5286deba9b00ebcf9444e8cb319e2b8522785e7a36f0d58d89ff37202d4986b36980194420b09ea1e8570b7ac410f7b76cbbb47636ed8b5962e9cb3c63e038013ce739c07f8ce23912"}, {0x30, 0x10c, 0x21b3482d, "6080f602017603b8963e9e47158506f011d2f9d78fd8e75226a788b95164"}, {0xb0, 0x1, 0x4cfe, "70f486e82929e1bb64066d7dbe055126fcb74701637474fc44bb6038176b74a515ba5fd7f375746367fd83d610f32c094f61af60d01147946512a2b1554b94b1327d619a0a7ecca2082d65ad18e11600a28cd751c3d0bd3f696bb206a1434ce29d59f9bf6cf49e412a5a31a1fbf7ab7b21ad990a93d57729e0be77d97770f8ec7fcc16a34c77ceaa558ca3821dc359341d0ca7b80f84a611ba6478594d5ca0"}, {0x48, 0x118, 0x80, "45f0363a2df7db8278a57b38352358561aa8372c38004de8a30cbfcc17b697e53531d5305322f0c983a52a53cfb54b86528b4c07f2"}], 0x258}, 0x800) (async, rerun: 32) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) (rerun: 32) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003cc0)={'wlan0\x00'}) (async, rerun: 64) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000002b80)) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98570100", @ANYRES16=r4, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x6c, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3f, 0x77}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7d8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x522}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8840}, 0x4) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x66}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe44}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x2, 0x0, 0x401, 0x7, 0x5, 0x4, 0x1]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa9a}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x105a}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) (async) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000003c80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x20, r4, 0xb00, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000002bc0)="0768629d2b20f6a5467434adc7a6d1fc0012fbb39288b8b3eaee22dc9817ea121e0054770c7503ab82283778bd5684004afccfb63eca7da88257e0a4a2e9247ca6934f871f823891b2b5dfb2963bb8a23a0cfd6696d2d4088c1fd0642871fcbe1522399a5b67474b9c0c6694b4da0bb1a9af830ceadfbd7a428a487fa09231e67eff6734b72d2a867394c5b4241ca0af8c2944f1ffd479e72aecd7fcb2588e03e1aad3baedd4d5f3e9d9e1ec73b5f456d6fee8212f7804c60fe2c3419b89e57d9aebaeefbbb4693191156b0319254afaa633e59e4ef89cf116083ce949d84eb3d25ffa03f4b7f39b637c119d490fcfc0da427d1576d0e8c5fca94a314986a95c6b5e9ecd75f52e6acb3e986d2a4552289dc5e03c159c19e224138ad7f93e747c528db67ed055e2edd1f695daeb1dbefbcc8378adc5681551b3dabd9d81f3e0b2fdce3114a67405aa9f5dda584a1e215a9fffea693057af7091009e83be5607d059d1f133986b03272a7de8530a52c5cb7461a98b25a86e39923f3b32197d04da36d93ae50a781cf4aa478c494c11beff240f687eb09568a9789ad19d83fa1a49ccbabedadfcea0192bacdb376106941ffc193b825344caf9445f2d3b00225d2dd62a52894162a509099e718379a9780cfe7c7c339187d69967e924dad6370fdf5109752e9996b294422a916b969256f3190e8fc887c0a515344d8d531ea4a11348c45a8aa597cb102966515fa163b9978684095e099d37e3266e87ac6f9086736b8abe8c445580a4bd7352e45a0a08a711a7688c5b6b16d2271e7dd4ed6c8e95c6db58064aa8c765a224b74fa99c35e41e28493097951d96aa02f34a3348db28c3029d158a26fcf5e4c5ad6629905208e2548584bb511fed164c5a816bf465e4ccc8d9b5002953f062cab8f9899d7d4fd6068f78b087209e4c8bec2e33718d649373978801e8261a5f574c67d93b9d5455c92155acb3d62d38fc1004a95ec5aa4135b397ea9b8f6706aaf3e2150cd306dc5a373c68fedce793521e1215aa8ff70c66b03460bb0e4a2e2c9e48f676e79b0996fb7503137ddc811a2643c32596379decc87d9c5cb48fee1639010912fb781231e68a03a95edaf3eda8ece887e054823573c41273cec8f99271a1d1ba8b2ca651290d84e14796adfa5c9cbda9beda070baa5d444e067a4f39bbc7e3bc2c69d744f1ced7336dc40fed5601d552f8a042bdf5bf26c6ffe9d5436f1e90867078eea33eb3b1a30920096f9da6a49e0ca59599d256da9e3ff1e4ab27459e2af0326744769e1e167b06cb206839ec69507a1e081a35ecb532c0fc27e3364d55cb2c647dddc7dfb058b81afeda0bbde10bf62647fdbac0afdb00ab214f1b576e29390beac1d93f59d522a742dd0c5f1ae60adf164041b485f3872f209c6a23d3a9b40674e460c9c86586e5ffca214310bfb456c770da43a42ca9885d52884a58449351d96f1cc16756f8ee1c523a236640d2a364ba27eca8b26779657021966194dfd0ff68054ce90d36b11d6d47d8e099dc361c7fc3a3367689c03e66f32e139cd7e996d4311de9643bc8dc8dd96b85cf752e31ce9666a244972b614cf8658fea7f254b1cff5c5da926575defdfae17f9dc03ad2f83093248c6945b53f7b1ad461e4cfe262ec1f171670f618014b22dbfb70dc04bc146e67c1d2b836f11d6214e6fa36739b2cb0a4cddc2ef72177f287e8e2f029267eedba63d7ec764049b10e9ee4aabccb80be09df14d05a2bb10bd52f602e5a0c203924a37ed5f3b66aadc6abd106f8ff0c9d42340121b4ecfdbb1383c289dfde548f0e3c5dd3266a35de065157e771c1d8e1ad265a59962fbe60f0286c8057059b751cf5ca3e2fe6746f66c1d2cdaa02226c99046b9977786cb2658a0458034c9c15a333b634f6563bec07ca273319282d62112f8a4e7812a18c44b39c3b113718ed279525201dd96ec66fee2a614bcd140c47d3784d34e357f46e36db499102e732b26a2b9c9fec0993943a02d2cbab46550c8f5c1f0f811a06f874d29f75b6b7cc86bc0a0ca2964d1df9796fbfe8f22f4b4aa8b0b81844563cfc2902c99275f78cbf32120320e029df0a16c316db5440af7fcafac1b6e09a3a8b57f881d01a6574ad1829d754b41e500efba3b7883bed87e981558559927d0fa5788c52ba57ba6fc941f67f6529b24a7de9dba0564dc95a0a8fdc3b83d248568d78b5c7b31ddcd691a7d86f5b4ba6910490e718adfafb28c74769e80ef5d822c014c346d1c54a71a51bf6655029b5a75da5e152ae0fd9226e1193a2d71a9747d74d26ae30bd52703ca9b55f66fcb825d579c1332ced5d8e4ca686fa43c01fc2d38a146603ca97af32bf79cf5f5e4961325b46c1d9e5c188062d7bf2611d7a032167abcacef5eeadbd9893327e426253c4670e3fe287954e003349d2da495e9a154c6c8ca95f5c5394cd5ec5879e9d54d4ee8dc489983bd21f24b7f0f11bc1a97cca41961f1be7753be900bff121fb6e9c6027eae4bc398c8b1e0e41d89fe6fa4b7fc7a8639caa5549cc398c76670491e6afbf0ffdd7085f2d9570fd90dd2c4a2350d9f4c6c52b83cdd27c428bdd9356f57223728343dbd6b5a688329b0c577bc064bf3114de242fdc461d6d9e79a3aece911bbc35de629cb5a63dbb524de4c93b203fb120f29ee75ecbf4ba1d1ce89da92f24a87019af0f9687035b7f156db84e320a1838b8526a8406e4a6d0c82f8694a657ce68362720a3ae58f147bc00beeb46a34a0e75fb74bbbc527258acf971cd58aab4e2fc67ffdd37e70b452fdeb70760922f76fb74bcd3355357bc491fbe783fbda849bd5b94271d0a93b8df82fb9bb0382ec770cafe4c4ab147dd0aaf65e37fad1d415560e3f4880810311b28e3d36f0f9d919c88b048952ab0d815bdd063bb3fb0aa92e7e4fe0a8451d0dca3f0baf9694175f563b7914fa8a1ddcabc2650f677b5591774ab5eb8a4233316081ebeedf4039cf8b888fedf8ddcf6b95c5667641c376d02660da121cb66f01b7959175af3c603f04e2beebc25a2e5149852a306c085fefa5c99773af7788c557376165ef6d7c64cf030b76ef65e9715b67249255ab80333e129a1edfef3acb8eaef9b57fd2983b2b7cc4c9a13b91afd636e64cc995159e7a869865f5f399ceff4d0cef3f6db72457c94a992975e080d45a430d893cf0cc489b1635a3f9717cc0be3489c95b172d16c8e53a0ec69e1f240c556d272120488f8c12bc83d2265571dd0dd8f4a7c0320032e8c97ba7652a36efd5ae1aee22536ea98f38268050a26bfc32cc047d90ff6e67ca25cd00be07e3188ef48bdf2d9b1d782dc4930a9bdaf6428f0929c96c1408ca0846f68a5552e74a48ed6c8d8bfc67533a6fd11567cdda3a7d63f1c8fd40757afd9eabe41ddf4bd6ff8c66af1ad1c4f6bc16fb9b670015ecbb38d0b974b2a8e2a7be38d73562fac68e839d18a1b9223a5e73fa1916aee9176d708566f863753bd7fcf4b9d6d4057b980a7142307e64f6d728a5566070fc69e8e948dca43e8cf07357b097c56758d9e0fe3ac66f51145032bbcee166365c583e64ae0cc876f3f0dc85801005f47429099a05afdf79a02002cbc922425f2b12c0c0a2c80980ffdb48d8e3a85cf5ed8db2978443d787b2fe06673930fa6315a665ded0125ed99f3cdde46da144e19e537f2da7881966b9b1d89bcf088eb7379cd391767857394b013cd9d911da46d1557a89dafddec322481288c8fa9b07e1258139e746a754886bdc8d1bdf97c2abe076305ffb712bbfc55ba5e3c9f2e71f578595217e0e710d3e0bb6a0197813c27afb23b3254becfc5dcd31016b0996e3e6b56dc3d6e72d42b1285651c984ab744f8eaf34fb361ec44f4ef3b364ba8e6997f14847d281346023e29982d3a8a9f6279955f1a8cc4a08236322cf395c1c9eb93fcf6cb62b3e5520c72220b853c29e81ea940f2f3f07898e0fbc74badc94a26dde886d9deb0af665e9a3065bd21895115f8a55b867830798403ecb7c775b42f97df2053b672e50fc972fdc1ab1cebd59b4ee1bc0dea775b57280dedf1e05a0d3dc4889beb62f2f9fece6626d28b3c38c0afab397c0e6c65dbdbfabff664b23de2d6e319b2fdff50b118d302d24d1f6b6d49b270a9a15fe17a3030d6b8103bedead7aaeeffbe0938aea28a5a2d0d5ffad4b11754e192be93a029fc03bf36f56528425ec1f3953b604a4c4bc56bdf1e02cd322fb4fd34f807c21f96cb8975fe6f1b37f78313cac99c1eefad8d0440664682457f762a3462b1d39dd35ead3be96b15f6a0e665a742cb0e19bfa049b57e32c3cdce70e704d79b493c13b36673cd90cf170fa0793b543608a04754a8fe2103b7850cb9e1c4f01cd8d8ffa66ccce817efba766faf6f3737af0f0d591e4cf3523f7b7b9758d7c7e83b7661043500d26fcbd63fbe337d298523bf391e4d3922eaa6de1f86838574f316ab509a4cd53c6844cacc3bc17c0c20e35a06808f553d9d676b1b20822e1ddfb724bbe2a9039785b95a4ad86e43952dbfc11a4524d1f573e0b5403c856b5916c26b93134590872d23fc189cc88652c2513dcb09b82c5c4d0db5f22cbe25c9cc98d6cbe575e9e176165bb68a2a35bbb5d093cd8047b42405c22127be95dfc71f466d2c3cab8635deafe45d505d3b08437d3daf6adfd963991d5128f595257d2fae2e206049b7e3d989affb3cf3bb2ffa10be48bc0e2db8b67bb256c3125570591543d682fd8f8790184bf224cd37d73e3670f62a210c2f51bd3ec503244ff17d79dbf2a32ae828974f2646ee4b3e39c45a5d81e6305ee8e1190cc923beac060a70eafad6d7876000d33db7fe3732ebc39d57111dbbc6265250ea1642a401f59024c011de064384d57c97bed1a3673de752b4f656ff84e922d4ab0658c2d59efc45bdaf1c357edf333879513b9f785547e53882759e71d947ccdf2584ab34ec3e9e5bfdc17e6a6a4f23f0dfa52aad868ae57bd9ae2295455ebfc8dc603b7a2735e6017a75a083a20edd6d10277caf1875b1d0c7494a0b710a8fb7394ef31bdeb87d69416ea1d54e8bdb7c131c9ad095c76be9e39c4f57bab11ba954f861fbb2f209a789d2220c9cd3fe73456a8ddbf18f38c2c0eac363d619e597c22c593fe9aacc09cfa3661a6745485e153aaa771b0f87298c4c58991afc651da72de322c973007e10f859fdefa80818bd425f02d20eaab83f93d4f88b2785dfe799b3374fc4ac9d0d7dda93de060cd749c5b1eb39949f3219302b0995b450e82f07a96b4f696db3b92b67c1f4b509045939c5ec5ac2ab7edbec4568698601580fe4b1147b7bf345c2cf4adada1e12891af700b755df88a4ec7d26bc07c1aa3f2151d3487d3dbfa15e82b1ca2b0ea8faa13aa3c097d6f700569f57a5f782c42d999582c5c5dad154e40ce9c128a506a85401d545de2fe64872f98afe225c41cd98c14264ad3e9e27df697630cdc10cd2337f2e2da18395c737c19656025f051631db4a54fb47ec64ff7c61093285fe42e82f57518366d86b64af7cc9a384966153ba601796c93db799c5f44c7294ac604aaad9131cea21592a2f1612b46b6a5edbdfa7df5bf742814b3d235c98a36387f4b4c18a757635a2b73e89f9f58b44d1da7e05b358a37091d534185390e4ea97c67a45d33fa9c6ef99f97a50b30dc1c23807e5cbe6dbad9655a373b5694cb3c9564717ace818c314538e85713d3af838dbbef8f6477a9faa82e2c0ab8174596910c4b9012fdfe2a5f85e179afcffb9bf53641042bced94a61c8c1e26d9300c25693") 00:12:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x8000000}, 0x0) 00:12:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x34}}, 0x4000804) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x24, 0x25, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x2, 0xa}, {0xe, 0xffe0}}}, 0x24}}, 0x4004080) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) write(r3, &(0x7f0000004200)='t', 0x1) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x34}}, 0x4000804) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x24, 0x25, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x2, 0xa}, {0xe, 0xffe0}}}, 0x24}}, 0x4004080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) 00:12:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800a000", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="ec00ee000000000000000000"], 0x28}}, 0x0) 00:12:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) (async) write(r1, &(0x7f0000004200)='t', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) (async) write(r2, &(0x7f0000004200)='t', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800a000", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="ec00ee000000000000000000"], 0x28}}, 0x0) 00:12:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 00:12:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2dc, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x176b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f22de7c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}]}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xce4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x849}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2a24}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1edd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "faa11dcde07dd1c5ecb3272d0261b7ac4a084f8a10dfc9f49002bb57301239992d0fd4"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7ff}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}}}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x240000c5}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (async, rerun: 32) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg(r6, &(0x7f0000000300)={&(0x7f0000000240)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x80, &(0x7f0000002740)=[{&(0x7f00000002c0)="a07c5b0c31a3fab563cf23bc12f8a35d14aece", 0x13}, {&(0x7f00000004c0)="101d17a40974d648e7d29d17dfb2e8484f39ccdfce76370514fa617df4f8767229af686d0754bf81132fbea628bb6d049092a7a71f43d8233118618539dc44a43abd88ae5e3f267bdd159967ae1c4256df8c6b774abe193132a48cc368d93f7ce6cd909f34ce237a4d6dcc30caf037e7958da6dbc5b3d4b4e7288ef4f77c6159407b", 0x82}, {&(0x7f0000000580)="025381b29518e96a56365dd4d629ba551e3464af016bf796168599362d701ced7ac5769af96f3f27e95bd6ec90cfd7b1b63a26d178744539b0dd7bbc55dd0671ccde187c8b089242086c95bd9d265eaf0dae38f99e8418f8e75f1f803d34b5657fb744c666595ff9a586621a61974e9f222de350489d74caaab32ec0aeb4d5c19074d2124772db9269097d43a602", 0x8e}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="4cabc08285a1ec6fbd27e31ba57512f881a103d1464f0b5e6062a31de8d43a24f7d6dc2d507d361684ebde341ecefa5f24f5a44c0a7c136b6e65a870af7bb69bcfe7eb19331022b6d3b0dc59e053a1323a01fe96a79d96e159c2b7f33425fe38b1e92480b4a81c1ebc29c0e1522f18d80bf6262c8509fac575392048e4fbf74c03f5dcd322943d725f2b9106653a60c386918a9bf75cca613c9cb9a4f923b3757a34557614e5062bc2c620bfd19bd2669814080473", 0xb5}, {&(0x7f0000000380)="ad4b02838cb4e4055f2a42d06f3882b83db16b15bad24e6ed957376ddd7a1cecacd52d1ab0d39fadf4618631d46d360de3a590673964ba5cd5c140ad6343cb4a492e59b89e10ce355608af893fbaf6221403b8dd2b444b6d9dfaf4aa4750", 0x5e}, {&(0x7f0000001740)="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", 0x1000}], 0x7, &(0x7f00000027c0)=[{0x50, 0x10b, 0x8, "d38b421b98f1d129799c12124a33c4830f973fe71bc0919c79d4605f1b79b21d799302cbbc2e032d08acbf724ed84dc1fd30a649f26e639fe10acc123e"}, {0x20, 0x29, 0x5, "994784692e97c2864880ac"}, {0xc0, 0x117, 0x8, "ad3e4fe9ee508e9a2c4a0940819b7af8d26ba9190c3a352ec77391eecf7343dfc45264eaff4f325a7cfd96052e7a975a71ed2fba546f15439502b0036985fca5110b793f2ef6c93dfe7356d26bbbed635941ce333f45d4064e6d1a3b345fde02c53c34fb441bad5286deba9b00ebcf9444e8cb319e2b8522785e7a36f0d58d89ff37202d4986b36980194420b09ea1e8570b7ac410f7b76cbbb47636ed8b5962e9cb3c63e038013ce739c07f8ce23912"}, {0x30, 0x10c, 0x21b3482d, "6080f602017603b8963e9e47158506f011d2f9d78fd8e75226a788b95164"}, {0xb0, 0x1, 0x4cfe, "70f486e82929e1bb64066d7dbe055126fcb74701637474fc44bb6038176b74a515ba5fd7f375746367fd83d610f32c094f61af60d01147946512a2b1554b94b1327d619a0a7ecca2082d65ad18e11600a28cd751c3d0bd3f696bb206a1434ce29d59f9bf6cf49e412a5a31a1fbf7ab7b21ad990a93d57729e0be77d97770f8ec7fcc16a34c77ceaa558ca3821dc359341d0ca7b80f84a611ba6478594d5ca0"}, {0x48, 0x118, 0x80, "45f0363a2df7db8278a57b38352358561aa8372c38004de8a30cbfcc17b697e53531d5305322f0c983a52a53cfb54b86528b4c07f2"}], 0x258}, 0x800) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000003cc0)={'wlan0\x00'}) (async, rerun: 64) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000002b80)) (async, rerun: 64) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98570100", @ANYRES16=r4, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x6c, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x3f, 0x77}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7d8}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x522}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8840}, 0x4) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, r4, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x66}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xe44}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x12, 0xcd, [0x2, 0x0, 0x401, 0x7, 0x5, 0x4, 0x1]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa9a}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x105a}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_GET_WOWLAN(r9, &(0x7f0000003c80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003c00)={0x20, r4, 0xb00, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x101, 0x22}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000002bc0)="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") [ 751.628907][ T5420] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x34}}, 0x4000804) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@delqdisc={0x24, 0x25, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x2, 0xa}, {0xe, 0xffe0}}}, 0x24}}, 0x4004080) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800a000", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="ec00ee000000000000000000"], 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000004200)='t', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) write(r2, &(0x7f0000004200)='t', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) write(r3, &(0x7f0000004200)='t', 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800a000", @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="ec00ee000000000000000000"], 0x28}}, 0x0) (async) 00:12:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 00:12:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88ca}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x14044000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 752.012495][ T5571] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.0'. 00:12:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x9000000}, 0x0) 00:12:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100002f7f0512d53f92e60000002d000000", @ANYRES32=r1, @ANYBLOB="1db8d34823a881ed483d9c96014ccdb10d94558c086a6091522e6f73ca59bce5510af05fad30962de9612f3f6f80944f3187c4b22edcfc636079eaeb3531a20e1e76000000007927d37d36612d4876e8f6502c58967cadbc"], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fddbdf253d00000008000300", @ANYRES32=r10, @ANYBLOB="08005d00010000000008005d000000000008005d0001000000080002000000000008005d000100000008005d000100008008005d0000000000085d0000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x2c008000}, 0x0) 00:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 1) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) [ 752.098118][ T5568] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88ca}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x14044000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88ca}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x14044000) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async) 00:12:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7}, 0x0) [ 752.171928][ T5612] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.2'. [ 752.174231][ T5604] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 752.202574][ T5604] FAULT_INJECTION: forcing a failure. [ 752.202574][ T5604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.206360][ T5604] CPU: 1 PID: 5604 Comm: syz-executor.3 Not tainted 6.1.70-syzkaller #0 [ 752.208313][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 752.210658][ T5604] Call trace: [ 752.211406][ T5604] dump_backtrace+0x1c8/0x1f4 [ 752.212438][ T5604] show_stack+0x2c/0x3c [ 752.213477][ T5604] dump_stack_lvl+0x108/0x170 [ 752.214604][ T5604] dump_stack+0x1c/0x58 [ 752.215517][ T5604] should_fail_ex+0x3c0/0x51c [ 752.216696][ T5604] should_fail+0x14/0x24 [ 752.217698][ T5604] should_fail_usercopy+0x20/0x30 [ 752.218984][ T5604] copy_msghdr_from_user+0xb8/0x59c [ 752.220131][ T5604] __sys_sendmsg+0x200/0x33c [ 752.221174][ T5604] __arm64_sys_sendmsg+0x80/0x94 [ 752.222207][ T5622] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.0'. [ 752.222376][ T5604] invoke_syscall+0x98/0x2c0 [ 752.225926][ T5604] el0_svc_common+0x138/0x258 [ 752.226999][ T5604] do_el0_svc+0x64/0x218 [ 752.228034][ T5604] el0_svc+0x58/0x168 [ 752.229022][ T5604] el0t_64_sync_handler+0x84/0xf0 [ 752.230194][ T5604] el0t_64_sync+0x18c/0x190 00:12:32 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100002f7f0512d53f92e60000002d000000", @ANYRES32=r1, @ANYBLOB="1db8d34823a881ed483d9c96014ccdb10d94558c086a6091522e6f73ca59bce5510af05fad30962de9612f3f6f80944f3187c4b22edcfc636079eaeb3531a20e1e76000000007927d37d36612d4876e8f6502c58967cadbc"], 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fddbdf253d00000008000300", @ANYRES32=r10, @ANYBLOB="08005d00010000000008005d000000000008005d0001000000080002000000000008005d000100000008005d000100008008005d0000000000085d0000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x2c008000}, 0x0) 00:12:32 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88ca}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x14044000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 00:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 2) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 752.506114][ T5767] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.0'. [ 752.518408][ T5790] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 752.570539][ T5836] FAULT_INJECTION: forcing a failure. [ 752.570539][ T5836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.585367][ T5836] CPU: 1 PID: 5836 Comm: syz-executor.3 Not tainted 6.1.70-syzkaller #0 [ 752.587303][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 752.589748][ T5836] Call trace: [ 752.590472][ T5836] dump_backtrace+0x1c8/0x1f4 [ 752.591555][ T5836] show_stack+0x2c/0x3c [ 752.592534][ T5836] dump_stack_lvl+0x108/0x170 [ 752.593677][ T5836] dump_stack+0x1c/0x58 [ 752.594672][ T5836] should_fail_ex+0x3c0/0x51c [ 752.595886][ T5836] should_fail+0x14/0x24 [ 752.597022][ T5836] should_fail_usercopy+0x20/0x30 [ 752.598179][ T5836] iovec_from_user+0xcc/0x5e0 [ 752.599301][ T5836] __import_iovec+0x84/0x448 [ 752.600320][ T5836] import_iovec+0x88/0xa4 [ 752.601313][ T5836] copy_msghdr_from_user+0x3f4/0x59c [ 752.602542][ T5836] __sys_sendmsg+0x200/0x33c [ 752.603591][ T5836] __arm64_sys_sendmsg+0x80/0x94 [ 752.604777][ T5836] invoke_syscall+0x98/0x2c0 [ 752.605932][ T5836] el0_svc_common+0x138/0x258 [ 752.606991][ T5836] do_el0_svc+0x64/0x218 [ 752.608008][ T5836] el0_svc+0x58/0x168 [ 752.609040][ T5836] el0t_64_sync_handler+0x84/0xf0 [ 752.610259][ T5836] el0t_64_sync+0x18c/0x190 00:12:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100002f7f0512d53f92e60000002d000000", @ANYRES32=r1, @ANYBLOB="1db8d34823a881ed483d9c96014ccdb10d94558c086a6091522e6f73ca59bce5510af05fad30962de9612f3f6f80944f3187c4b22edcfc636079eaeb3531a20e1e76000000007927d37d36612d4876e8f6502c58967cadbc"], 0x1c}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00042cbd7000fddbdf253d00000008000300", @ANYRES32=r10, @ANYBLOB="08005d00010000000008005d000000000008005d0001000000080002000000000008005d000100000008005d000100008008005d0000000000085d0000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x2c008000}, 0x0) 00:12:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xa000000}, 0x0) 00:12:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0xa}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40400c1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 00:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 3) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) [ 752.744749][ T5881] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0xa}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40400c1) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 00:12:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9}, 0x0) [ 752.842574][ T5970] FAULT_INJECTION: forcing a failure. [ 752.842574][ T5970] name failslab, interval 1, probability 0, space 0, times 0 [ 752.860631][ T5970] CPU: 1 PID: 5970 Comm: syz-executor.3 Not tainted 6.1.70-syzkaller #0 [ 752.862520][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 752.865024][ T5970] Call trace: [ 752.865802][ T5970] dump_backtrace+0x1c8/0x1f4 [ 752.866944][ T5970] show_stack+0x2c/0x3c [ 752.867908][ T5970] dump_stack_lvl+0x108/0x170 [ 752.868962][ T5970] dump_stack+0x1c/0x58 [ 752.869986][ T5970] should_fail_ex+0x3c0/0x51c [ 752.871112][ T5970] __should_failslab+0xc8/0x128 [ 752.872167][ T5970] should_failslab+0x10/0x28 [ 752.873189][ T5970] kmem_cache_alloc_node+0x90/0x3b4 [ 752.874334][ T5970] __alloc_skb+0x114/0x580 [ 752.875420][ T5970] netlink_sendmsg+0x634/0xb18 [ 752.876553][ T5970] ____sys_sendmsg+0x558/0x844 [ 752.877706][ T5970] __sys_sendmsg+0x26c/0x33c [ 752.878741][ T5970] __arm64_sys_sendmsg+0x80/0x94 [ 752.879897][ T5970] invoke_syscall+0x98/0x2c0 [ 752.880951][ T5970] el0_svc_common+0x138/0x258 [ 752.881960][ T5970] do_el0_svc+0x64/0x218 [ 752.882949][ T5970] el0_svc+0x58/0x168 [ 752.883954][ T5970] el0t_64_sync_handler+0x84/0xf0 [ 752.885039][ T5970] el0t_64_sync+0x18c/0x190 00:12:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x88, r4, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_KEYS={0x6c, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cf996cb68de65effe16d0c5d50"}, @NL80211_KEY_SEQ={0xc, 0x4, "abd47f3723afcbc6"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) 00:12:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd0, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x24008090) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x5, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffeff, 0x79}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040480}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x23c, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x800}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x2, 0x1}, {}, {0xb, 0x1}, {0x1b, 0x1}, {0x16}, {0x6c, 0x1}, {0x4}, {0xb, 0x1}, {0x60, 0x1}, {0x9}, {0x16}, {0x4}, {0x2}, {0x3}, {0x2}, {0x12, 0x1}, {0x6c, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x48}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x6, 0x18, 0x60, 0x9, 0x3, 0x0, 0x36, 0x4, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0xffff, 0x9, 0x7, 0x6, 0x6261, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1f, 0x101, 0x9, 0x0, 0x81, 0xfc00, 0x8b7]}}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x1, 0xf9, 0x0, 0x2, 0x47, 0x25e0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x85, 0xa762, 0x3, 0x5, 0x8001, 0x6, 0x8000, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x15, 0x5, 0x1, 0x5, 0x9, 0x6, 0x1f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x1b, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0xfff, 0x9, 0x455d, 0x3, 0x7ff, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {}, {0x4, 0x8}, {0x2}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x5, 0x5}, {0x4, 0x5}, {0x4, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0xa}, {0x3, 0x6}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x5, 0xa}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {}, {0x6, 0x8}, {0x2, 0x1}, {0x3, 0x17}, {0x0, 0x4}, {0x7, 0x4}, {0x4, 0xa}, {0x1, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x1}, {0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0xa}, {0x1}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x0, 0x5}, {0x4, 0x4}, {0x4, 0xa}, {0x7}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x1}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11, 0x7, 0x8001, 0x8, 0x98f4, 0x1203, 0x4, 0x7487]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x3, 0x6}, {0x4, 0x3}, {}, {0x1}, {0x0, 0x7}, {0x7, 0x8}, {0x5, 0x2}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x0, 0x8001, 0x400, 0x81, 0x4, 0x101]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x1}, {0x4, 0x2}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0x7}, {0x7, 0x6}, {0x3, 0x5}, {0x6, 0x17}, {0x5, 0x6}, {0x2}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x8}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x1, 0x1b, 0x60, 0x1, 0x9, 0x49, 0x48, 0xb, 0x16, 0x1b, 0x16, 0x5, 0x9, 0x1b, 0x25]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x89, 0x1, 0x0, 0x7ff, 0xfffd, 0x93, 0x3]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x23c}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r12, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_GET_KEY(r12, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r4, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "2b0ca0de3e"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) 00:12:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0xa}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40400c1) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 00:12:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa}, 0x0) 00:12:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x8c, r1, 0x600, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "6d2acf6290"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "a106234b36d4053593"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20024090}, 0x40800) 00:12:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd0, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x24008090) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x5, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffeff, 0x79}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040480}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x23c, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x800}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x2, 0x1}, {}, {0xb, 0x1}, {0x1b, 0x1}, {0x16}, {0x6c, 0x1}, {0x4}, {0xb, 0x1}, {0x60, 0x1}, {0x9}, {0x16}, {0x4}, {0x2}, {0x3}, {0x2}, {0x12, 0x1}, {0x6c, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x48}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x6, 0x18, 0x60, 0x9, 0x3, 0x0, 0x36, 0x4, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0xffff, 0x9, 0x7, 0x6, 0x6261, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1f, 0x101, 0x9, 0x0, 0x81, 0xfc00, 0x8b7]}}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x1, 0xf9, 0x0, 0x2, 0x47, 0x25e0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x85, 0xa762, 0x3, 0x5, 0x8001, 0x6, 0x8000, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x15, 0x5, 0x1, 0x5, 0x9, 0x6, 0x1f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x1b, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0xfff, 0x9, 0x455d, 0x3, 0x7ff, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {}, {0x4, 0x8}, {0x2}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x5, 0x5}, {0x4, 0x5}, {0x4, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0xa}, {0x3, 0x6}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x5, 0xa}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {}, {0x6, 0x8}, {0x2, 0x1}, {0x3, 0x17}, {0x0, 0x4}, {0x7, 0x4}, {0x4, 0xa}, {0x1, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x1}, {0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0xa}, {0x1}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x0, 0x5}, {0x4, 0x4}, {0x4, 0xa}, {0x7}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x1}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11, 0x7, 0x8001, 0x8, 0x98f4, 0x1203, 0x4, 0x7487]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x3, 0x6}, {0x4, 0x3}, {}, {0x1}, {0x0, 0x7}, {0x7, 0x8}, {0x5, 0x2}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x0, 0x8001, 0x400, 0x81, 0x4, 0x101]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x1}, {0x4, 0x2}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0x7}, {0x7, 0x6}, {0x3, 0x5}, {0x6, 0x17}, {0x5, 0x6}, {0x2}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x8}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x1, 0x1b, 0x60, 0x1, 0x9, 0x49, 0x48, 0xb, 0x16, 0x1b, 0x16, 0x5, 0x9, 0x1b, 0x25]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x89, 0x1, 0x0, 0x7ff, 0xfffd, 0x93, 0x3]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x23c}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r12, &(0x7f0000004200)='t', 0x1) (async, rerun: 32) sendmsg$NL80211_CMD_GET_KEY(r12, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r4, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "2b0ca0de3e"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) (rerun: 32) 00:12:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xb000000}, 0x0) 00:12:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 5) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x88, r4, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_KEYS={0x6c, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cf996cb68de65effe16d0c5d50"}, @NL80211_KEY_SEQ={0xc, 0x4, "abd47f3723afcbc6"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) 00:12:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x8c, r1, 0x600, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "6d2acf6290"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "a106234b36d4053593"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20024090}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) write(r3, &(0x7f0000004200)='t', 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x8c, r1, 0x600, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "6d2acf6290"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "a106234b36d4053593"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20024090}, 0x40800) (async) 00:12:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x44, r3, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd0, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x24008090) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0x5, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffeff, 0x79}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040480}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x23c, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x800}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0x19, 0x24, [{0x2, 0x1}, {}, {0xb, 0x1}, {0x1b, 0x1}, {0x16}, {0x6c, 0x1}, {0x4}, {0xb, 0x1}, {0x60, 0x1}, {0x9}, {0x16}, {0x4}, {0x2}, {0x3}, {0x2}, {0x12, 0x1}, {0x6c, 0x1}, {0x4}, {0x1, 0x1}, {0x2}, {0x48}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x6, 0x18, 0x60, 0x9, 0x3, 0x0, 0x36, 0x4, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0xffff, 0x9, 0x7, 0x6, 0x6261, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1f, 0x101, 0x9, 0x0, 0x81, 0xfc00, 0x8b7]}}]}, @NL80211_BAND_6GHZ={0xb8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x1, 0xf9, 0x0, 0x2, 0x47, 0x25e0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x85, 0xa762, 0x3, 0x5, 0x8001, 0x6, 0x8000, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x15, 0x5, 0x1, 0x5, 0x9, 0x6, 0x1f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xb, 0x1b, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0xfff, 0x9, 0x455d, 0x3, 0x7ff, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6}, {}, {0x4, 0x8}, {0x2}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x9}, {0x0, 0x7}, {0x0, 0x4}, {0x1, 0x6}, {0x5, 0x5}, {0x4, 0x5}, {0x4, 0x3}, {0x7, 0x7}, {0x7, 0x4}, {0x0, 0x7}, {0x6, 0x5}, {0x5, 0xa}, {0x3, 0x6}, {0x7, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x5, 0xa}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x4, 0x8}, {}, {0x6, 0x8}, {0x2, 0x1}, {0x3, 0x17}, {0x0, 0x4}, {0x7, 0x4}, {0x4, 0xa}, {0x1, 0x8}, {0x2, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x1}, {0x5}, {0x6, 0x8}, {0x2, 0x1}, {0x0, 0xa}, {0x1}, {0x2, 0x8}, {0x6, 0x9}, {0x5, 0x7}, {0x0, 0x5}, {0x4, 0x4}, {0x4, 0xa}, {0x7}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x6, 0x1}]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11, 0x7, 0x8001, 0x8, 0x98f4, 0x1203, 0x4, 0x7487]}}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x0, 0x9}, {0x3, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x3, 0x6}, {0x4, 0x3}, {}, {0x1}, {0x0, 0x7}, {0x7, 0x8}, {0x5, 0x2}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x0, 0x8001, 0x400, 0x81, 0x4, 0x101]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x1}, {0x4, 0x2}, {0x2, 0x1}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0x7}, {0x7, 0x6}, {0x3, 0x5}, {0x6, 0x17}, {0x5, 0x6}, {0x2}, {0x4, 0x2}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x8}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x1, 0x1b, 0x60, 0x1, 0x9, 0x49, 0x48, 0xb, 0x16, 0x1b, 0x16, 0x5, 0x9, 0x1b, 0x25]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x89, 0x1, 0x0, 0x7ff, 0xfffd, 0x93, 0x3]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x23c}, 0x1, 0x0, 0x0, 0x11}, 0x20004000) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r12, &(0x7f0000004200)='t', 0x1) (async) sendmsg$NL80211_CMD_GET_KEY(r12, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r4, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "2b0ca0de3e"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) [ 753.403480][ T6160] FAULT_INJECTION: forcing a failure. [ 753.403480][ T6160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.426194][ T6160] CPU: 0 PID: 6160 Comm: syz-executor.3 Not tainted 6.1.70-syzkaller #0 [ 753.428167][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 753.430624][ T6160] Call trace: [ 753.431415][ T6160] dump_backtrace+0x1c8/0x1f4 [ 753.432503][ T6160] show_stack+0x2c/0x3c [ 753.433456][ T6160] dump_stack_lvl+0x108/0x170 [ 753.434521][ T6160] dump_stack+0x1c/0x58 [ 753.435451][ T6160] should_fail_ex+0x3c0/0x51c [ 753.436639][ T6160] should_fail+0x14/0x24 [ 753.437570][ T6160] should_fail_usercopy+0x20/0x30 [ 753.438717][ T6160] copyin+0x2c/0x154 [ 753.439639][ T6160] _copy_from_iter+0x438/0xe4c [ 753.440726][ T6160] netlink_sendmsg+0x704/0xb18 [ 753.441933][ T6160] ____sys_sendmsg+0x558/0x844 [ 753.443098][ T6160] __sys_sendmsg+0x26c/0x33c [ 753.444189][ T6160] __arm64_sys_sendmsg+0x80/0x94 [ 753.445294][ T6160] invoke_syscall+0x98/0x2c0 [ 753.446380][ T6160] el0_svc_common+0x138/0x258 [ 753.447477][ T6160] do_el0_svc+0x64/0x218 [ 753.448515][ T6160] el0_svc+0x58/0x168 [ 753.449420][ T6160] el0t_64_sync_handler+0x84/0xf0 [ 753.450516][ T6160] el0t_64_sync+0x18c/0x190 00:12:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf}, 0x0) 00:12:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x8c, r1, 0x600, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "6d2acf6290"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "a106234b36d4053593"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20024090}, 0x40800) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) write(r3, &(0x7f0000004200)='t', 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)={0x8c, r1, 0x600, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_SEQ={0x9, 0xa, "6d2acf6290"}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_SEQ={0xd, 0xa, "a106234b36d4053593"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20024090}, 0x40800) (async) 00:12:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000002c0)={0x60c, r3, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x5b4, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @broadcast, @initial, {0xb, 0xff}}, {0x0, 0x0, 0x1, 0x0, 0xdb}}, {@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x1}, {0x7}, @broadcast, @device_b, @initial, {0x0, 0x3}}, {0x0, 0x1, 0x1, 0x1, 0xf1}}}, @random="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"}}, @NL80211_ATTR_FRAME={0x20, 0x33, @ctrl_frame=@ba={{}, {0x6}, @device_a, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0x3}, {0x6, 0xff8}, "15a84da1336c6cce"}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)={0x258, r6, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x57}}}}, [@NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x3, 0x40, 0xff, 0x0, 0x3, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x5, 0xfffe, 0x6, 0x4, 0xfffc, 0x401]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x0, 0x5}, {0x4, 0x8}, {0x5, 0x4}, {0x4, 0x7}, {0x5, 0x6}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x9}, {0x2, 0x1}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x5}, {0x4, 0x1}, {0x1, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0xc, 0x48, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9b70, 0xfffe, 0x3, 0x401, 0x3, 0x81, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7, 0x5, 0xc4c0, 0xc00, 0x9, 0x7fff, 0x133c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc9, 0xf9b, 0x81, 0x2, 0x4, 0x3, 0x2, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x3, 0x8}, {0x4, 0x6}, {0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x5, 0x2}, {0x6}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x2, 0x13}, {0x5, 0x3}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x3}, {0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0xa}, {0x3, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x12, 0x36, 0xc, 0x30, 0x48, 0x6c, 0x36]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x8}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x2, 0x8}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x7, 0x8}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x2}, {}, {0x1, 0xa}, {0x2, 0x9}, {0x4}, {0x6, 0x3}, {0x3}, {0x1, 0x7}, {0x6, 0x6}, {0x7, 0x8}, {0x5, 0x2}, {0x6}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x7}, {0x3}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0x9}, {0x5, 0x9}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x3}, {0x2, 0x7}, {0x2, 0x3}, {0x5, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x7}, {0x1, 0x3}, {0x2, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xd81, 0x3, 0x2, 0x5, 0x1, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x34b1, 0x1000, 0x8000, 0x1fb, 0x3, 0x0, 0x800, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x9, 0x8, 0x7, 0x4, 0x8, 0x20, 0xfffb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x48, 0x48, 0x6, 0x2, 0x24, 0x1b, 0xc, 0x3, 0x16, 0x12, 0x48]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x9}, {0x5, 0x1}, {0x0, 0xa}, {0x2, 0x7}, {0x6, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x5, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {}, {0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x1}, {0x7, 0x6}, {0x2, 0x7}, {}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x2}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x5, 0x7}, {0x1, 0x7}]}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0\x00'}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x88, r4, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_KEYS={0x6c, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cf996cb68de65effe16d0c5d50"}, @NL80211_KEY_SEQ={0xc, 0x4, "abd47f3723afcbc6"}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x80) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) 00:12:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="072fb846cd09d53ddb446ebf45c5d9da", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="e4443d14c055ac1d4cf0efb980db236207340329fdbc9bb0cfbdb06dd6e2dd0ad3bb4e7557b433b0d7b4b3b4709b78d5f496443c657cdac592da4f1bd58ee50bfe033e30aaf9a57e49c7af6a03bc981e692b47586724780e494353d816026847b944e88011320d0224fd402f19a1af96144bc669d6ef6b7b536060e133f4b90beb19b5d7de2f9b56f03d624e895819c2b2e4eb47925daab4fcbba25ae969518254bcba6447f1dd06"], 0x1c}}, 0x0) 00:12:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) [ 753.771543][ T6307] FAULT_INJECTION: forcing a failure. [ 753.771543][ T6307] name failslab, interval 1, probability 0, space 0, times 0 [ 753.785340][ T6307] CPU: 0 PID: 6307 Comm: syz-executor.3 Not tainted 6.1.70-syzkaller #0 [ 753.787398][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 753.789825][ T6307] Call trace: [ 753.790634][ T6307] dump_backtrace+0x1c8/0x1f4 [ 753.791775][ T6307] show_stack+0x2c/0x3c [ 753.792781][ T6307] dump_stack_lvl+0x108/0x170 [ 753.793876][ T6307] dump_stack+0x1c/0x58 [ 753.794843][ T6307] should_fail_ex+0x3c0/0x51c [ 753.795911][ T6307] __should_failslab+0xc8/0x128 [ 753.797132][ T6307] should_failslab+0x10/0x28 [ 753.798238][ T6307] kmem_cache_alloc+0x8c/0x37c [ 753.799233][ T6307] skb_clone+0x19c/0x304 [ 753.800228][ T6307] __netlink_deliver_tap+0x364/0x6e4 [ 753.801472][ T6307] netlink_deliver_tap+0x1ac/0x1b0 [ 753.802631][ T6307] netlink_unicast+0x640/0x898 [ 753.803740][ T6307] netlink_sendmsg+0x834/0xb18 [ 753.804888][ T6307] ____sys_sendmsg+0x558/0x844 [ 753.805901][ T6307] __sys_sendmsg+0x26c/0x33c [ 753.806933][ T6307] __arm64_sys_sendmsg+0x80/0x94 [ 753.808079][ T6307] invoke_syscall+0x98/0x2c0 [ 753.809195][ T6307] el0_svc_common+0x138/0x258 [ 753.810187][ T6307] do_el0_svc+0x64/0x218 [ 753.811109][ T6307] el0_svc+0x58/0x168 [ 753.811990][ T6307] el0t_64_sync_handler+0x84/0xf0 [ 753.813148][ T6307] el0t_64_sync+0x18c/0x190 00:12:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xc000000}, 0x0) 00:12:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="072fb846cd09d53ddb446ebf45c5d9da", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="e4443d14c055ac1d4cf0efb980db236207340329fdbc9bb0cfbdb06dd6e2dd0ad3bb4e7557b433b0d7b4b3b4709b78d5f496443c657cdac592da4f1bd58ee50bfe033e30aaf9a57e49c7af6a03bc981e692b47586724780e494353d816026847b944e88011320d0224fd402f19a1af96144bc669d6ef6b7b536060e133f4b90beb19b5d7de2f9b56f03d624e895819c2b2e4eb47925daab4fcbba25ae969518254bcba6447f1dd06"], 0x1c}}, 0x0) 00:12:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="072fb846cd09d53ddb446ebf45c5d9da", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="e4443d14c055ac1d4cf0efb980db236207340329fdbc9bb0cfbdb06dd6e2dd0ad3bb4e7557b433b0d7b4b3b4709b78d5f496443c657cdac592da4f1bd58ee50bfe033e30aaf9a57e49c7af6a03bc981e692b47586724780e494353d816026847b944e88011320d0224fd402f19a1af96144bc669d6ef6b7b536060e133f4b90beb19b5d7de2f9b56f03d624e895819c2b2e4eb47925daab4fcbba25ae969518254bcba6447f1dd06"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="072fb846cd09d53ddb446ebf45c5d9da", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="e4443d14c055ac1d4cf0efb980db236207340329fdbc9bb0cfbdb06dd6e2dd0ad3bb4e7557b433b0d7b4b3b4709b78d5f496443c657cdac592da4f1bd58ee50bfe033e30aaf9a57e49c7af6a03bc981e692b47586724780e494353d816026847b944e88011320d0224fd402f19a1af96144bc669d6ef6b7b536060e133f4b90beb19b5d7de2f9b56f03d624e895819c2b2e4eb47925daab4fcbba25ae969518254bcba6447f1dd06"], 0x1c}}, 0x0) (async) 00:12:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa4, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44080}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) 00:12:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) (fail_nth: 1) 00:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c}, 0x0) 00:12:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 7) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) [ 754.280743][ T6541] FAULT_INJECTION: forcing a failure. [ 754.280743][ T6541] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 754.294970][ T6541] CPU: 0 PID: 6541 Comm: syz-executor.0 Not tainted 6.1.70-syzkaller #0 [ 754.296939][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 754.299402][ T6541] Call trace: [ 754.300200][ T6541] dump_backtrace+0x1c8/0x1f4 [ 754.301415][ T6541] show_stack+0x2c/0x3c [ 754.302495][ T6541] dump_stack_lvl+0x108/0x170 [ 754.303643][ T6541] dump_stack+0x1c/0x58 [ 754.304675][ T6541] should_fail_ex+0x3c0/0x51c [ 754.305873][ T6541] should_fail_alloc_page+0x74/0xb8 [ 754.307124][ T6541] prepare_alloc_pages+0x1c0/0x508 [ 754.308401][ T6541] __alloc_pages+0x150/0x730 [ 754.309545][ T6541] __folio_alloc+0x1c/0x48 [ 754.310718][ T6541] vma_alloc_folio+0x394/0x8d8 [ 754.311874][ T6541] alloc_zeroed_user_highpage_movable+0x74/0x88 [ 754.313430][ T6541] handle_mm_fault+0x1e44/0x3ef0 [ 754.314620][ T6541] do_page_fault+0x330/0x890 [ 754.315785][ T6541] do_translation_fault+0x94/0xc8 [ 754.316974][ T6541] do_mem_abort+0x74/0x200 [ 754.318119][ T6541] el0_da+0x70/0x184 [ 754.319153][ T6541] el0t_64_sync_handler+0xcc/0xf0 [ 754.320325][ T6541] el0t_64_sync+0x18c/0x190 00:12:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa4, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44080}, 0x4) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) [ 754.431613][ T6572] FAULT_INJECTION: forcing a failure. [ 754.431613][ T6572] name failslab, interval 1, probability 0, space 0, times 0 [ 754.439034][ T6541] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF 00:12:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000002c0)={0x60c, r3, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x5b4, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @broadcast, @initial, {0xb, 0xff}}, {0x0, 0x0, 0x1, 0x0, 0xdb}}, {@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x1}, {0x7}, @broadcast, @device_b, @initial, {0x0, 0x3}}, {0x0, 0x1, 0x1, 0x1, 0xf1}}}, @random="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"}}, @NL80211_ATTR_FRAME={0x20, 0x33, @ctrl_frame=@ba={{}, {0x6}, @device_a, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0x3}, {0x6, 0xff8}, "15a84da1336c6cce"}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)={0x258, r6, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x57}}}}, [@NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x3, 0x40, 0xff, 0x0, 0x3, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x5, 0xfffe, 0x6, 0x4, 0xfffc, 0x401]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x0, 0x5}, {0x4, 0x8}, {0x5, 0x4}, {0x4, 0x7}, {0x5, 0x6}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x9}, {0x2, 0x1}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x5}, {0x4, 0x1}, {0x1, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0xc, 0x48, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9b70, 0xfffe, 0x3, 0x401, 0x3, 0x81, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7, 0x5, 0xc4c0, 0xc00, 0x9, 0x7fff, 0x133c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc9, 0xf9b, 0x81, 0x2, 0x4, 0x3, 0x2, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x3, 0x8}, {0x4, 0x6}, {0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x5, 0x2}, {0x6}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x2, 0x13}, {0x5, 0x3}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x3}, {0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0xa}, {0x3, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x12, 0x36, 0xc, 0x30, 0x48, 0x6c, 0x36]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x8}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x2, 0x8}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x7, 0x8}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x2}, {}, {0x1, 0xa}, {0x2, 0x9}, {0x4}, {0x6, 0x3}, {0x3}, {0x1, 0x7}, {0x6, 0x6}, {0x7, 0x8}, {0x5, 0x2}, {0x6}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x7}, {0x3}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0x9}, {0x5, 0x9}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x3}, {0x2, 0x7}, {0x2, 0x3}, {0x5, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x7}, {0x1, 0x3}, {0x2, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xd81, 0x3, 0x2, 0x5, 0x1, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x34b1, 0x1000, 0x8000, 0x1fb, 0x3, 0x0, 0x800, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x9, 0x8, 0x7, 0x4, 0x8, 0x20, 0xfffb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x48, 0x48, 0x6, 0x2, 0x24, 0x1b, 0xc, 0x3, 0x16, 0x12, 0x48]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x9}, {0x5, 0x1}, {0x0, 0xa}, {0x2, 0x7}, {0x6, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x5, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {}, {0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x1}, {0x7, 0x6}, {0x2, 0x7}, {}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x2}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x5, 0x7}, {0x1, 0x7}]}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x0) [ 754.448135][ T6572] CPU: 1 PID: 6572 Comm: syz-executor.3 Not tainted 6.1.70-syzkaller #0 [ 754.450109][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 754.452525][ T6572] Call trace: [ 754.453360][ T6572] dump_backtrace+0x1c8/0x1f4 [ 754.454501][ T6572] show_stack+0x2c/0x3c [ 754.455504][ T6572] dump_stack_lvl+0x108/0x170 [ 754.456642][ T6572] dump_stack+0x1c/0x58 [ 754.457594][ T6572] should_fail_ex+0x3c0/0x51c [ 754.458681][ T6572] __should_failslab+0xc8/0x128 [ 754.459818][ T6572] should_failslab+0x10/0x28 [ 754.460907][ T6572] __kmem_cache_alloc_node+0x80/0x388 [ 754.462247][ T6572] __kmalloc+0xc4/0x1c4 [ 754.463243][ T6572] genl_family_rcv_msg_attrs_parse+0xac/0x240 [ 754.464699][ T6572] genl_rcv_msg+0x664/0xc2c [ 754.465783][ T6572] netlink_rcv_skb+0x20c/0x3b8 [ 754.466896][ T6572] genl_rcv+0x38/0x50 [ 754.467888][ T6572] netlink_unicast+0x65c/0x898 [ 754.469115][ T6572] netlink_sendmsg+0x834/0xb18 [ 754.470451][ T6572] ____sys_sendmsg+0x558/0x844 [ 754.471606][ T6572] __sys_sendmsg+0x26c/0x33c [ 754.472704][ T6572] __arm64_sys_sendmsg+0x80/0x94 [ 754.474003][ T6572] invoke_syscall+0x98/0x2c0 [ 754.475131][ T6572] el0_svc_common+0x138/0x258 [ 754.476225][ T6572] do_el0_svc+0x64/0x218 [ 754.477177][ T6572] el0_svc+0x58/0x168 [ 754.478172][ T6572] el0t_64_sync_handler+0x84/0xf0 [ 754.479371][ T6572] el0t_64_sync+0x18c/0x190 00:12:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xd000000}, 0x0) 00:12:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa4, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44080}, 0x4) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xa4, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44080}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) 00:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 754.710299][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.712253][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 8) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000002c0)={0x60c, r3, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x5b4, 0x33, @data_frame={@qos_no_ht={{@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {}, @device_b, @broadcast, @initial, {0xb, 0xff}}, {0x0, 0x0, 0x1, 0x0, 0xdb}}, {@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x1, 0x1}, {0x7}, @broadcast, @device_b, @initial, {0x0, 0x3}}, {0x0, 0x1, 0x1, 0x1, 0xf1}}}, @random="68822195ebaa193e2bdd5e2f4228d9453a3f8759f14376d5505d9ecd8eaaba554a127feaa3ef68673f656c5baec5b457701a2ab5c62a86977ac576cb96159c17ed956f354d26fc15b791520bdabf2a1e2f1272d071a638470e5140de3d89a4d851f51ce18e9bc17140962c618b3032a93b8fb0e580306b330dbc183b5f9ef73e4319e9b7eb46842846d87a4e7b5629d018f0ef57001d49520c488630b6d553625647a2c754cd40586f825e7777e0fa0bce9ae72fcfaf53488cc85dea1a173b0e327d0a2d77f722d9437cdbffb67cf1e5db87a25971bed5d28190164d5383a2471f1a355101fe4183e7c43917451ba5826cc72c8f640d321e28df067cd3a759c15b1111dfb5adf85962199bb1429f5eb54fde1dd1689394e18f21f8b667feec6955a60863aaeb2ecef08b1c63c571b05e0155ebb1be8e7297b58fcb1383547133e040f8e88074b9899c9474ec7b31bdc41afdc250f006e809501fb10ee8ed559f537c65954d6b25159c353724a4bb059e892111f89dfb4d3ed98ac173547786e5b8a518b8837a16ca3d1d5a1e975b0d116b82171680e81d92472bdeaa17c32fb4ea6c3b036fb1a5688e017990d1f92e475dd59d8bc045348f66f9dde0df46e3a1ca770378d8a4e0300032809fbb7cc38bae3f52dda93740d80e6de8b857d2f69b41319887689e87f54b7dfaa6793f2e63da1ec3d8264843504e7b6acd39d4e8b7261b43d1e60be9eba11ef3869c5d82ba464816811bee8c7d0a0d6fbb296c05b3e93541864ab2c15ee4c3632e662981b5f663fd437565fe23278fbadeb9037c397d02028def90c4d5ef6998c7cef03a7d4e9c1680efed9ccc4b8545a78448f025463b92aefa094413e7af4ef337c1328fdfdbd656d8c44076733b02c5cf5e104fb0090cb5e806638ca345e6703909cef6ffe25adee20a11908fb3e9f0343373fba6dbb8643c7cfdd5249937b86a42e25ec65c3dada9a7f9b4b9cfe0b71a76d2803c79b72b2681b77525935a681112ef1f317b5c84a843d7eeec196ddf3db2bb06a498f63d232e6087b189bb630e80a30e8c308998a4b1f1933dd2adb07ccca285aa7ce518a566a1b2d2adf2e2ad33dfb7510d4b13803a5475b3fe080d9dd86bb43850768e793ec7cffae60c25381b51e13b8b8eb344208542eefa11b7b10870a1cf2cb5ff41b7e8e5e861a7fff95f85e800aa91669a21aeedb4f5e56c6e27b1968f5f7ccb2de846fee5e7378746e3fd4003630dfb418eebd334df66b6f2232b8836e73e804207923002909ec73780bd12a59cbbca435a9e191c6e596ac5ab3caf36f8cbda539c94ad25049f6522f1f78df8692ba86b25864ef5d5a820a6bfe235db2cf28b18cfbd95eaf0f485721f145ba24e71542674bf9000e607afdf97f7a7c44933e0febf0d140c4638043a4bc42689bcae772541c0a8b28f33d3273d358d7bc833f84a4a198095b7627eaaab13ff5a4708a55ddaf607abaf8dd22891d5aa2e558624b7616a55a7339ec48a61641af48a2e1fc5b916d63de29e63f82fb79212d312f651cc15d0bfe8a18af6e06c4bbf9304dc4885073761522ee1d3e216ab04437b7772840c500ba77c82caf1e2f8dfa5e197baba66500c54a360f44b97e77545ea58ad02edd096970ecce074d821eb342ab4e6412bb9c0bc6e58cab3b93b14a729aa5a072f8d82b536275aff288b4c4c78bbc7ef68e0336bab24ad12163dc98b1725b2af386efe44c9dfe1d94fc111b182cb4f584631d1edb6c3e3836fc565ae035a5b8a0062d6e65740b8ae8ef7891e2816ea0f509dc8f5376c37ad476b014121ebf32317e541e9489d16099cfbeab875dda043ffd34f756e7cf47d2b507911722e2615501b9b06179ee518b007258bd92f678f4f566e1513dc77466809b3ebc8524e2641c85ff846ace49b3e43c39b6cb7a7425f53a26d991d57986616c8a5abaa43e937dae45434dc14b39967b95057fcb1c6f9c04e14b51a"}}, @NL80211_ATTR_FRAME={0x20, 0x33, @ctrl_frame=@ba={{}, {0x6}, @device_a, @broadcast, @compressed={{0x1, 0x0, 0x1, 0x0, 0x3}, {0x6, 0xff8}, "15a84da1336c6cce"}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x60c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)={0x258, r6, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x57}}}}, [@NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x3, 0x40, 0xff, 0x0, 0x3, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x5, 0xfffe, 0x6, 0x4, 0xfffc, 0x401]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x0, 0x5}, {0x4, 0x8}, {0x5, 0x4}, {0x4, 0x7}, {0x5, 0x6}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x9}, {0x2, 0x1}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x5}, {0x4, 0x1}, {0x1, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0xc, 0x48, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9b70, 0xfffe, 0x3, 0x401, 0x3, 0x81, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7, 0x5, 0xc4c0, 0xc00, 0x9, 0x7fff, 0x133c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc9, 0xf9b, 0x81, 0x2, 0x4, 0x3, 0x2, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x3, 0x8}, {0x4, 0x6}, {0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x5, 0x2}, {0x6}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x2, 0x13}, {0x5, 0x3}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x3}, {0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0xa}, {0x3, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x12, 0x36, 0xc, 0x30, 0x48, 0x6c, 0x36]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x8}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x2, 0x8}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x7, 0x8}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x2}, {}, {0x1, 0xa}, {0x2, 0x9}, {0x4}, {0x6, 0x3}, {0x3}, {0x1, 0x7}, {0x6, 0x6}, {0x7, 0x8}, {0x5, 0x2}, {0x6}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x7}, {0x3}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0x9}, {0x5, 0x9}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x3}, {0x2, 0x7}, {0x2, 0x3}, {0x5, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x7}, {0x1, 0x3}, {0x2, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xd81, 0x3, 0x2, 0x5, 0x1, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x34b1, 0x1000, 0x8000, 0x1fb, 0x3, 0x0, 0x800, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x9, 0x8, 0x7, 0x4, 0x8, 0x20, 0xfffb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x48, 0x48, 0x6, 0x2, 0x24, 0x1b, 0xc, 0x3, 0x16, 0x12, 0x48]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x9}, {0x5, 0x1}, {0x0, 0xa}, {0x2, 0x7}, {0x6, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x5, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {}, {0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x1}, {0x7, 0x6}, {0x2, 0x7}, {}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x2}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x5, 0x7}, {0x1, 0x7}]}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000c80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)={0x258, r6, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x57}}}}, [@NL80211_ATTR_TX_RATES={0x238, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x3, 0x40, 0xff, 0x0, 0x3, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0x5, 0xfffe, 0x6, 0x4, 0xfffc, 0x401]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x9}, {0x1, 0x7}, {0x5, 0xa}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0xa}, {0x3, 0x3}, {0x0, 0x2}, {0x1, 0x8}, {0x4, 0x8}, {0x4, 0x9}, {0x2, 0x8}, {0x0, 0x5}, {0x4, 0x8}, {0x5, 0x4}, {0x4, 0x7}, {0x5, 0x6}, {0x7, 0xa}, {0x3, 0x8}, {0x2, 0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0xa}, {0x5, 0x5}, {0x4, 0x4}, {0x4, 0x7}, {0x4, 0x7}, {0x0, 0x5}, {0x4, 0x9}, {0x2, 0x1}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x3}, {0x1, 0x7}, {0x0, 0x3}, {0x5}, {0x4, 0x1}, {0x1, 0x9}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0xc, 0x48, 0x60]}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9b70, 0xfffe, 0x3, 0x401, 0x3, 0x81, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x7, 0x5, 0xc4c0, 0xc00, 0x9, 0x7fff, 0x133c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc9, 0xf9b, 0x81, 0x2, 0x4, 0x3, 0x2, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x1, 0x2}, {0x6, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x3, 0x8}, {0x4, 0x6}, {0x6}, {0x4, 0x5}, {0x2, 0x5}, {0x6, 0x4}, {0x5, 0x1}, {0x4, 0x1}, {0x6, 0x6}, {0x5, 0x1}, {0x7, 0x2}, {0x2, 0xa}, {0x7, 0x2}, {0x1, 0x2}, {0x3, 0x2}, {0x0, 0x9}, {0x7, 0x2}, {0x4, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {0x6, 0xa}, {0x6}, {0x7, 0x7}, {0x2, 0x2}, {0x5, 0x2}, {0x6}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x2, 0x13}, {0x5, 0x3}, {0x0, 0x9}, {0x3, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x5, 0x9}, {0x3, 0x7}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x4}, {0x5, 0x5}, {0x0, 0x7}, {0x1, 0x3}, {0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x5, 0xa}, {0x3, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x6, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x7}, {0x7, 0x6}, {0x1, 0x5}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x2, 0x12, 0x36, 0xc, 0x30, 0x48, 0x6c, 0x36]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x8}, {0x2, 0x6}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x2, 0x8}, {0x0, 0x3}, {0x2, 0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x8}, {0x1, 0x9}, {0x1, 0x6}, {0x4, 0x9}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x4}, {0x1, 0x6}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x7, 0x8}, {0x2, 0x6}, {0x5, 0x7}, {0x0, 0x2}, {}, {0x1, 0xa}, {0x2, 0x9}, {0x4}, {0x6, 0x3}, {0x3}, {0x1, 0x7}, {0x6, 0x6}, {0x7, 0x8}, {0x5, 0x2}, {0x6}, {0x3, 0x4}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x7}, {0x3}, {0x4, 0x2}, {0x2, 0x1}, {0x0, 0x3}, {0x3, 0x9}, {0x0, 0x4}, {0x3, 0x9}, {0x5, 0x9}, {0x0, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x2, 0x3}, {0x2, 0x7}, {0x2, 0x3}, {0x5, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x6, 0x3}, {0x4, 0x2}, {0x1, 0x6}, {0x7, 0x7}, {0x3, 0x8}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x7}, {0x1, 0x3}, {0x2, 0x9}, {0x3, 0x5}, {0x0, 0x4}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xd81, 0x3, 0x2, 0x5, 0x1, 0x8]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x34b1, 0x1000, 0x8000, 0x1fb, 0x3, 0x0, 0x800, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x9, 0x8, 0x7, 0x4, 0x8, 0x20, 0xfffb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1, 0x48, 0x48, 0x6, 0x2, 0x24, 0x1b, 0xc, 0x3, 0x16, 0x12, 0x48]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x9}, {0x5, 0x1}, {0x0, 0xa}, {0x2, 0x7}, {0x6, 0x2}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x5, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x5}, {}, {0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x1, 0x6}, {0x5, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x1}, {0x7, 0x6}, {0x2, 0x7}, {}, {0x1, 0x3}, {0x7, 0x2}, {0x4, 0x2}, {0x7, 0x5}, {0x5, 0x9}, {0x0, 0x6}, {0x1, 0x7}, {0x7, 0x2}, {0x5, 0x7}, {0x1, 0x7}]}]}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) (fail_nth: 2) [ 754.836567][ T6779] FAULT_INJECTION: forcing a failure. [ 754.836567][ T6779] name failslab, interval 1, probability 0, space 0, times 0 [ 754.859077][ T6779] CPU: 0 PID: 6779 Comm: syz-executor.3 Not tainted 6.1.70-syzkaller #0 [ 754.861124][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 754.863569][ T6779] Call trace: [ 754.864390][ T6779] dump_backtrace+0x1c8/0x1f4 [ 754.865632][ T6779] show_stack+0x2c/0x3c [ 754.866589][ T6779] dump_stack_lvl+0x108/0x170 00:12:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="a79d527e6664ddb7be29080026000000"], 0x2c}}, 0x0) [ 754.867724][ T6779] dump_stack+0x1c/0x58 [ 754.868792][ T6779] should_fail_ex+0x3c0/0x51c [ 754.869937][ T6779] __should_failslab+0xc8/0x128 [ 754.871155][ T6779] should_failslab+0x10/0x28 [ 754.872243][ T6779] kmem_cache_alloc_node+0x90/0x3b4 [ 754.873557][ T6779] __alloc_skb+0x114/0x580 [ 754.874572][ T6779] netlink_ack+0x2f4/0xf20 [ 754.875766][ T6779] netlink_rcv_skb+0x1ec/0x3b8 [ 754.877064][ T6779] genl_rcv+0x38/0x50 [ 754.878123][ T6779] netlink_unicast+0x65c/0x898 [ 754.879401][ T6779] netlink_sendmsg+0x834/0xb18 [ 754.880561][ T6779] ____sys_sendmsg+0x558/0x844 [ 754.881830][ T6779] __sys_sendmsg+0x26c/0x33c [ 754.883009][ T6779] __arm64_sys_sendmsg+0x80/0x94 [ 754.884269][ T6779] invoke_syscall+0x98/0x2c0 [ 754.885552][ T6779] el0_svc_common+0x138/0x258 [ 754.886759][ T6779] do_el0_svc+0x64/0x218 [ 754.887925][ T6779] el0_svc+0x58/0x168 [ 754.888957][ T6779] el0t_64_sync_handler+0x84/0xf0 [ 754.890286][ T6779] el0t_64_sync+0x18c/0x190 00:12:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xf000000}, 0x0) 00:12:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x500}, 0x0) [ 755.041611][ T6848] FAULT_INJECTION: forcing a failure. [ 755.041611][ T6848] name failslab, interval 1, probability 0, space 0, times 0 [ 755.059309][ T6848] CPU: 1 PID: 6848 Comm: syz-executor.0 Not tainted 6.1.70-syzkaller #0 [ 755.061307][ T6848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 755.063714][ T6848] Call trace: [ 755.064471][ T6848] dump_backtrace+0x1c8/0x1f4 [ 755.065606][ T6848] show_stack+0x2c/0x3c [ 755.066533][ T6848] dump_stack_lvl+0x108/0x170 [ 755.067734][ T6848] dump_stack+0x1c/0x58 [ 755.068673][ T6848] should_fail_ex+0x3c0/0x51c [ 755.069819][ T6848] __should_failslab+0xc8/0x128 [ 755.070964][ T6848] should_failslab+0x10/0x28 [ 755.072071][ T6848] slab_pre_alloc_hook+0x6c/0x33c [ 755.073376][ T6848] kmem_cache_alloc_lru+0x64/0x2f8 [ 755.074585][ T6848] sock_alloc_inode+0x2c/0xcc [ 755.075729][ T6848] new_inode_pseudo+0x68/0x1d0 [ 755.076851][ T6848] __sock_create+0x134/0x884 [ 755.078032][ T6848] __sys_socket+0x120/0x32c [ 755.079085][ T6848] __arm64_sys_socket+0x7c/0x94 [ 755.080218][ T6848] invoke_syscall+0x98/0x2c0 [ 755.081337][ T6848] el0_svc_common+0x138/0x258 [ 755.082429][ T6848] do_el0_svc+0x64/0x218 [ 755.083547][ T6848] el0_svc+0x58/0x168 [ 755.084589][ T6848] el0t_64_sync_handler+0x84/0xf0 [ 755.085760][ T6848] el0t_64_sync+0x18c/0x190 00:12:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x400040, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000840)=0x1, 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf2582830000080003003e29121ff72db2d2070cbe1ef3dd43fc3771da3523b5bf97e24c63633a445c3633adc025fbe52c4f38152fc3c38ac8f577b8e93e6183e21fe7cbe59245065a7d87c967fb81886488a047501264b912558f4f6bbcf95d05c499d1c64c11d0ae87770fd3f7140a5a2b6ad294f7f1291236a14f85d4fec1c45ba549202e5035f3e54c58b04990e43cc7aa400231d67f7eead72ec56d41916abe52fa6f", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r10, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xd, {0x4c0e, 0x1f, 0x89dd, 0x4}}}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r12, &(0x7f0000004200)='t', 0x1) sendmsg$RDMA_NLDEV_CMD_GET(r12, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x1401, 0x10, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r13, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x44045}, 0x8001) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 755.166428][ T6848] socket: no more sockets 00:12:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="a79d527e6664ddb7be29080026000000"], 0x2c}}, 0x0) 00:12:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 9) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) (fail_nth: 3) 00:12:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 755.483073][ T6975] FAULT_INJECTION: forcing a failure. [ 755.483073][ T6975] name failslab, interval 1, probability 0, space 0, times 0 [ 755.487867][ T6975] CPU: 1 PID: 6975 Comm: syz-executor.0 Not tainted 6.1.70-syzkaller #0 [ 755.489837][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 755.492087][ T6975] Call trace: [ 755.492916][ T6975] dump_backtrace+0x1c8/0x1f4 [ 755.494040][ T6975] show_stack+0x2c/0x3c [ 755.495055][ T6975] dump_stack_lvl+0x108/0x170 [ 755.496214][ T6975] dump_stack+0x1c/0x58 [ 755.497293][ T6975] should_fail_ex+0x3c0/0x51c [ 755.498330][ T6975] __should_failslab+0xc8/0x128 [ 755.499398][ T6975] should_failslab+0x10/0x28 [ 755.500472][ T6975] __kmem_cache_alloc_node+0x80/0x388 [ 755.501743][ T6975] __kmalloc+0xc4/0x1c4 [ 755.502738][ T6975] sk_prot_alloc+0xc4/0x1f0 [ 755.503880][ T6975] sk_alloc+0x44/0x3e4 [ 755.504880][ T6975] __netlink_create+0x80/0x298 [ 755.505961][ T6975] netlink_create+0x3e4/0x6f0 [ 755.507111][ T6975] __sock_create+0x43c/0x884 [ 755.508290][ T6975] __sys_socket+0x120/0x32c [ 755.509361][ T6975] __arm64_sys_socket+0x7c/0x94 [ 755.510504][ T6975] invoke_syscall+0x98/0x2c0 [ 755.511626][ T6975] el0_svc_common+0x138/0x258 [ 755.512757][ T6975] do_el0_svc+0x64/0x218 [ 755.513767][ T6975] el0_svc+0x58/0x168 [ 755.514682][ T6975] el0t_64_sync_handler+0x84/0xf0 [ 755.515817][ T6975] el0t_64_sync+0x18c/0x190 00:12:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x400040, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000840)=0x1, 0x4) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf2582830000080003003e29121ff72db2d2070cbe1ef3dd43fc3771da3523b5bf97e24c63633a445c3633adc025fbe52c4f38152fc3c38ac8f577b8e93e6183e21fe7cbe59245065a7d87c967fb81886488a047501264b912558f4f6bbcf95d05c499d1c64c11d0ae87770fd3f7140a5a2b6ad294f7f1291236a14f85d4fec1c45ba549202e5035f3e54c58b04990e43cc7aa400231d67f7eead72ec56d41916abe52fa6f", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r10, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xd, {0x4c0e, 0x1f, 0x89dd, 0x4}}}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x48000) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r12, &(0x7f0000004200)='t', 0x1) (async) sendmsg$RDMA_NLDEV_CMD_GET(r12, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x1401, 0x10, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r13, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x44045}, 0x8001) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="a79d527e6664ddb7be29080026000000"], 0x2c}}, 0x0) 00:12:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x11000000}, 0x0) [ 755.600906][ T7056] FAULT_INJECTION: forcing a failure. [ 755.600906][ T7056] name failslab, interval 1, probability 0, space 0, times 0 [ 755.618706][ T7056] CPU: 0 PID: 7056 Comm: syz-executor.3 Not tainted 6.1.70-syzkaller #0 [ 755.620761][ T7056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 755.623236][ T7056] Call trace: [ 755.624059][ T7056] dump_backtrace+0x1c8/0x1f4 [ 755.625192][ T7056] show_stack+0x2c/0x3c [ 755.626169][ T7056] dump_stack_lvl+0x108/0x170 [ 755.627274][ T7056] dump_stack+0x1c/0x58 [ 755.628311][ T7056] should_fail_ex+0x3c0/0x51c [ 755.629493][ T7056] __should_failslab+0xc8/0x128 [ 755.630608][ T7056] should_failslab+0x10/0x28 [ 755.631770][ T7056] kmem_cache_alloc+0x8c/0x37c [ 755.632783][ T7056] skb_clone+0x19c/0x304 [ 755.633777][ T7056] __netlink_deliver_tap+0x364/0x6e4 [ 755.635043][ T7056] netlink_deliver_tap+0x1ac/0x1b0 [ 755.636198][ T7056] netlink_sendskb+0x6c/0x154 [ 755.637241][ T7056] netlink_unicast+0x320/0x898 [ 755.638368][ T7056] netlink_ack+0x9fc/0xf20 [ 755.639481][ T7056] netlink_rcv_skb+0x1ec/0x3b8 [ 755.640472][ T7056] genl_rcv+0x38/0x50 [ 755.641399][ T7056] netlink_unicast+0x65c/0x898 [ 755.642569][ T7056] netlink_sendmsg+0x834/0xb18 [ 755.643673][ T7056] ____sys_sendmsg+0x558/0x844 [ 755.644815][ T7056] __sys_sendmsg+0x26c/0x33c [ 755.645861][ T7056] __arm64_sys_sendmsg+0x80/0x94 [ 755.647063][ T7056] invoke_syscall+0x98/0x2c0 [ 755.648188][ T7056] el0_svc_common+0x138/0x258 [ 755.649360][ T7056] do_el0_svc+0x64/0x218 [ 755.650380][ T7056] el0_svc+0x58/0x168 [ 755.651334][ T7056] el0t_64_sync_handler+0x84/0xf0 [ 755.652514][ T7056] el0t_64_sync+0x18c/0x190 00:12:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x700}, 0x0) 00:12:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) (fail_nth: 4) [ 755.820948][ T7134] FAULT_INJECTION: forcing a failure. [ 755.820948][ T7134] name failslab, interval 1, probability 0, space 0, times 0 [ 755.824245][ T7134] CPU: 0 PID: 7134 Comm: syz-executor.0 Not tainted 6.1.70-syzkaller #0 [ 755.826309][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 755.828706][ T7134] Call trace: [ 755.829488][ T7134] dump_backtrace+0x1c8/0x1f4 [ 755.830553][ T7134] show_stack+0x2c/0x3c [ 755.831520][ T7134] dump_stack_lvl+0x108/0x170 [ 755.832611][ T7134] dump_stack+0x1c/0x58 [ 755.833567][ T7134] should_fail_ex+0x3c0/0x51c [ 755.834676][ T7134] __should_failslab+0xc8/0x128 [ 755.835873][ T7134] should_failslab+0x10/0x28 [ 755.836954][ T7134] __kmem_cache_alloc_node+0x80/0x388 [ 755.838286][ T7134] kmalloc_trace+0x48/0x94 [ 755.839360][ T7134] apparmor_sk_alloc_security+0x88/0x10c [ 755.840762][ T7134] security_sk_alloc+0x80/0xbc [ 755.841865][ T7134] sk_prot_alloc+0xe0/0x1f0 [ 755.842964][ T7134] sk_alloc+0x44/0x3e4 [ 755.843998][ T7134] __netlink_create+0x80/0x298 00:12:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x400040, 0x0) (async) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0), 0x400040, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000840)=0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) (async) write(r7, &(0x7f0000004200)='t', 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf2582830000080003003e29121ff72db2d2070cbe1ef3dd43fc3771da3523b5bf97e24c63633a445c3633adc025fbe52c4f38152fc3c38ac8f577b8e93e6183e21fe7cbe59245065a7d87c967fb81886488a047501264b912558f4f6bbcf95d05c499d1c64c11d0ae87770fd3f7140a5a2b6ad294f7f1291236a14f85d4fec1c45ba549202e5035f3e54c58b04990e43cc7aa400231d67f7eead72ec56d41916abe52fa6f", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf2582830000080003003e29121ff72db2d2070cbe1ef3dd43fc3771da3523b5bf97e24c63633a445c3633adc025fbe52c4f38152fc3c38ac8f577b8e93e6183e21fe7cbe59245065a7d87c967fb81886488a047501264b912558f4f6bbcf95d05c499d1c64c11d0ae87770fd3f7140a5a2b6ad294f7f1291236a14f85d4fec1c45ba549202e5035f3e54c58b04990e43cc7aa400231d67f7eead72ec56d41916abe52fa6f", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r10, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xd, {0x4c0e, 0x1f, 0x89dd, 0x4}}}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x48000) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r10, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xd, {0x4c0e, 0x1f, 0x89dd, 0x4}}}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r12, &(0x7f0000004200)='t', 0x1) sendmsg$RDMA_NLDEV_CMD_GET(r12, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x1401, 0x10, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r13, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x44045}, 0x8001) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 755.845084][ T7134] netlink_create+0x3e4/0x6f0 [ 755.846194][ T7134] __sock_create+0x43c/0x884 [ 755.847275][ T7134] __sys_socket+0x120/0x32c [ 755.848472][ T7134] __arm64_sys_socket+0x7c/0x94 [ 755.849821][ T7134] invoke_syscall+0x98/0x2c0 [ 755.850941][ T7134] el0_svc_common+0x138/0x258 [ 755.852066][ T7134] do_el0_svc+0x64/0x218 [ 755.853136][ T7134] el0_svc+0x58/0x168 [ 755.854201][ T7134] el0t_64_sync_handler+0x84/0xf0 [ 755.855397][ T7134] el0t_64_sync+0x18c/0x190 00:12:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'wg0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYRESOCT=r0], 0x2c}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000004c0)={0x0, 0x8000, 0x1, [0x7, 0x7, 0x1, 0x100000001, 0x7fffffff], [0x0, 0x5, 0x8000, 0x3ff, 0x8ef, 0x100000000, 0x400, 0x3, 0x9, 0x9, 0x7, 0x8000000000000001, 0xaa, 0x5f8, 0x610, 0x7, 0x3, 0xb943, 0x3c801b92, 0x0, 0x9, 0x1ff, 0x7fff, 0x7, 0x6, 0x7, 0x30, 0x4, 0x0, 0xb2, 0x7fffffff, 0x10001, 0x400, 0xd5, 0x8, 0x2, 0x8, 0x400, 0x9, 0x1ce, 0x0, 0x7, 0x7, 0x4, 0x7, 0x7, 0x926, 0xfffffffffffffffd, 0x0, 0x4, 0x10001, 0x12, 0x492, 0x91, 0x7fff, 0x28e6, 0xffffffffffffffff, 0xb887, 0x0, 0x5, 0x4, 0x9, 0x40, 0x4, 0x7fffffff, 0x800, 0x7, 0x6, 0xffffffffffffffff, 0x643, 0x6, 0x4, 0x9898, 0x67c93b48, 0x4, 0x4, 0xa, 0x20, 0xfffffffffffffff7, 0x5000000000000, 0x912, 0x200, 0x8000, 0x46, 0x3f, 0x280, 0x7, 0x3ff, 0x8000000000000000, 0x6, 0x8, 0x3, 0xff, 0x7cdd, 0x8000000000000001, 0x8, 0x81, 0x4, 0xb4, 0x8000, 0x1, 0x1, 0x6, 0x53, 0x4, 0x9, 0x7ff, 0x1, 0x7, 0x3, 0x7, 0x539f, 0xffffffff00000000, 0x4, 0xf2, 0x4, 0x3, 0x12291523, 0x1000, 0xa33, 0x7]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000900)={r3, 0x7fffffffffffffff, 0x1ff, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, &(0x7f00000002c0)=0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r6, 0x602, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1c}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x48}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x31}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}]]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x4040081) 00:12:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (fail_nth: 11) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x900}, 0x0) [ 755.982180][ T7194] FAULT_INJECTION: forcing a failure. [ 755.982180][ T7194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.999983][ T7194] CPU: 0 PID: 7194 Comm: syz-executor.3 Not tainted 6.1.70-syzkaller #0 [ 756.001999][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 756.004406][ T7194] Call trace: [ 756.005212][ T7194] dump_backtrace+0x1c8/0x1f4 [ 756.006370][ T7194] show_stack+0x2c/0x3c [ 756.007382][ T7194] dump_stack_lvl+0x108/0x170 [ 756.008529][ T7194] dump_stack+0x1c/0x58 [ 756.009604][ T7194] should_fail_ex+0x3c0/0x51c [ 756.010766][ T7194] should_fail+0x14/0x24 [ 756.011867][ T7194] should_fail_usercopy+0x20/0x30 [ 756.013135][ T7194] simple_read_from_buffer+0xd4/0x248 [ 756.014418][ T7194] proc_fail_nth_read+0x198/0x234 [ 756.015613][ T7194] vfs_read+0x280/0x8ac [ 756.016780][ T7194] ksys_read+0x15c/0x26c [ 756.017781][ T7194] __arm64_sys_read+0x7c/0x90 [ 756.018884][ T7194] invoke_syscall+0x98/0x2c0 [ 756.020001][ T7194] el0_svc_common+0x138/0x258 [ 756.021107][ T7194] do_el0_svc+0x64/0x218 [ 756.022053][ T7194] el0_svc+0x58/0x168 [ 756.023015][ T7194] el0t_64_sync_handler+0x84/0xf0 [ 756.024287][ T7194] el0t_64_sync+0x18c/0x190 00:12:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) (fail_nth: 5) 00:12:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'wg0\x00'}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYRESOCT=r0], 0x2c}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000004c0)={0x0, 0x8000, 0x1, [0x7, 0x7, 0x1, 0x100000001, 0x7fffffff], [0x0, 0x5, 0x8000, 0x3ff, 0x8ef, 0x100000000, 0x400, 0x3, 0x9, 0x9, 0x7, 0x8000000000000001, 0xaa, 0x5f8, 0x610, 0x7, 0x3, 0xb943, 0x3c801b92, 0x0, 0x9, 0x1ff, 0x7fff, 0x7, 0x6, 0x7, 0x30, 0x4, 0x0, 0xb2, 0x7fffffff, 0x10001, 0x400, 0xd5, 0x8, 0x2, 0x8, 0x400, 0x9, 0x1ce, 0x0, 0x7, 0x7, 0x4, 0x7, 0x7, 0x926, 0xfffffffffffffffd, 0x0, 0x4, 0x10001, 0x12, 0x492, 0x91, 0x7fff, 0x28e6, 0xffffffffffffffff, 0xb887, 0x0, 0x5, 0x4, 0x9, 0x40, 0x4, 0x7fffffff, 0x800, 0x7, 0x6, 0xffffffffffffffff, 0x643, 0x6, 0x4, 0x9898, 0x67c93b48, 0x4, 0x4, 0xa, 0x20, 0xfffffffffffffff7, 0x5000000000000, 0x912, 0x200, 0x8000, 0x46, 0x3f, 0x280, 0x7, 0x3ff, 0x8000000000000000, 0x6, 0x8, 0x3, 0xff, 0x7cdd, 0x8000000000000001, 0x8, 0x81, 0x4, 0xb4, 0x8000, 0x1, 0x1, 0x6, 0x53, 0x4, 0x9, 0x7ff, 0x1, 0x7, 0x3, 0x7, 0x539f, 0xffffffff00000000, 0x4, 0xf2, 0x4, 0x3, 0x12291523, 0x1000, 0xa33, 0x7]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000900)={r3, 0x7fffffffffffffff, 0x1ff, 0x1}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, &(0x7f00000002c0)=0x1c) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r6, 0x602, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1c}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x48}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x31}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}]]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x4040081) 00:12:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x20000000}, 0x0) [ 756.223646][ T7306] FAULT_INJECTION: forcing a failure. [ 756.223646][ T7306] name failslab, interval 1, probability 0, space 0, times 0 [ 756.233812][ T7306] CPU: 0 PID: 7306 Comm: syz-executor.0 Not tainted 6.1.70-syzkaller #0 [ 756.235793][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 756.238173][ T7306] Call trace: [ 756.238963][ T7306] dump_backtrace+0x1c8/0x1f4 [ 756.240103][ T7306] show_stack+0x2c/0x3c [ 756.241157][ T7306] dump_stack_lvl+0x108/0x170 [ 756.242308][ T7306] dump_stack+0x1c/0x58 [ 756.243234][ T7306] should_fail_ex+0x3c0/0x51c [ 756.244198][ T7306] __should_failslab+0xc8/0x128 [ 756.245400][ T7306] should_failslab+0x10/0x28 [ 756.246482][ T7306] slab_pre_alloc_hook+0x6c/0x33c [ 756.247779][ T7306] kmem_cache_alloc_lru+0x64/0x2f8 [ 756.249031][ T7306] __d_alloc+0x40/0x6ac [ 756.250015][ T7306] d_alloc_pseudo+0x28/0x8c [ 756.251088][ T7306] alloc_file_pseudo+0x110/0x278 [ 756.252291][ T7306] sock_alloc_file+0xb8/0x230 [ 756.253531][ T7306] __sys_socket+0x1a0/0x32c [ 756.254620][ T7306] __arm64_sys_socket+0x7c/0x94 [ 756.255805][ T7306] invoke_syscall+0x98/0x2c0 [ 756.256908][ T7306] el0_svc_common+0x138/0x258 [ 756.258036][ T7306] do_el0_svc+0x64/0x218 [ 756.259109][ T7306] el0_svc+0x58/0x168 [ 756.260099][ T7306] el0t_64_sync_handler+0x84/0xf0 [ 756.261263][ T7306] el0t_64_sync+0x18c/0x190 00:12:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r3, 0x114, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xde, 0x1}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6fe66e9b77c279b86a079c7f5633dc54a7527cf441ea41c5"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa00}, 0x0) [ 756.323104][ T7358] __nla_validate_parse: 19 callbacks suppressed [ 756.323119][ T7358] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.2'. [ 756.354296][ T7343] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'wg0\x00'}) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYRESOCT=r0], 0x2c}}, 0x0) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000004c0)={0x0, 0x8000, 0x1, [0x7, 0x7, 0x1, 0x100000001, 0x7fffffff], [0x0, 0x5, 0x8000, 0x3ff, 0x8ef, 0x100000000, 0x400, 0x3, 0x9, 0x9, 0x7, 0x8000000000000001, 0xaa, 0x5f8, 0x610, 0x7, 0x3, 0xb943, 0x3c801b92, 0x0, 0x9, 0x1ff, 0x7fff, 0x7, 0x6, 0x7, 0x30, 0x4, 0x0, 0xb2, 0x7fffffff, 0x10001, 0x400, 0xd5, 0x8, 0x2, 0x8, 0x400, 0x9, 0x1ce, 0x0, 0x7, 0x7, 0x4, 0x7, 0x7, 0x926, 0xfffffffffffffffd, 0x0, 0x4, 0x10001, 0x12, 0x492, 0x91, 0x7fff, 0x28e6, 0xffffffffffffffff, 0xb887, 0x0, 0x5, 0x4, 0x9, 0x40, 0x4, 0x7fffffff, 0x800, 0x7, 0x6, 0xffffffffffffffff, 0x643, 0x6, 0x4, 0x9898, 0x67c93b48, 0x4, 0x4, 0xa, 0x20, 0xfffffffffffffff7, 0x5000000000000, 0x912, 0x200, 0x8000, 0x46, 0x3f, 0x280, 0x7, 0x3ff, 0x8000000000000000, 0x6, 0x8, 0x3, 0xff, 0x7cdd, 0x8000000000000001, 0x8, 0x81, 0x4, 0xb4, 0x8000, 0x1, 0x1, 0x6, 0x53, 0x4, 0x9, 0x7ff, 0x1, 0x7, 0x3, 0x7, 0x539f, 0xffffffff00000000, 0x4, 0xf2, 0x4, 0x3, 0x12291523, 0x1000, 0xa33, 0x7]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000900)={r3, 0x7fffffffffffffff, 0x1ff, 0x1}) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, &(0x7f00000002c0)=0x1c) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r6, 0x602, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1c}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x48}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x31}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}]]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x4040081) 00:12:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) (fail_nth: 6) [ 756.608461][ T7443] FAULT_INJECTION: forcing a failure. [ 756.608461][ T7443] name failslab, interval 1, probability 0, space 0, times 0 00:12:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r3, 0x114, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xde, 0x1}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6fe66e9b77c279b86a079c7f5633dc54a7527cf441ea41c5"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40000000) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r3, 0x114, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xde, 0x1}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6fe66e9b77c279b86a079c7f5633dc54a7527cf441ea41c5"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xb2d}, 0x0) [ 756.646141][ T7443] CPU: 1 PID: 7443 Comm: syz-executor.0 Not tainted 6.1.70-syzkaller #0 [ 756.648086][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 756.650501][ T7443] Call trace: [ 756.651218][ T7443] dump_backtrace+0x1c8/0x1f4 [ 756.652297][ T7443] show_stack+0x2c/0x3c [ 756.653293][ T7443] dump_stack_lvl+0x108/0x170 [ 756.654376][ T7443] dump_stack+0x1c/0x58 [ 756.655389][ T7443] should_fail_ex+0x3c0/0x51c [ 756.656528][ T7443] __should_failslab+0xc8/0x128 [ 756.657714][ T7443] should_failslab+0x10/0x28 [ 756.658803][ T7443] kmem_cache_alloc+0x8c/0x37c [ 756.659954][ T7443] __alloc_file+0x30/0x22c [ 756.661019][ T7443] alloc_empty_file+0xa8/0x198 [ 756.662151][ T7443] alloc_file+0x64/0x55c [ 756.663191][ T7443] alloc_file_pseudo+0x1e0/0x278 [ 756.664312][ T7443] sock_alloc_file+0xb8/0x230 [ 756.665456][ T7443] __sys_socket+0x1a0/0x32c [ 756.666477][ T7443] __arm64_sys_socket+0x7c/0x94 [ 756.667599][ T7443] invoke_syscall+0x98/0x2c0 [ 756.668649][ T7443] el0_svc_common+0x138/0x258 [ 756.669743][ T7443] do_el0_svc+0x64/0x218 [ 756.670743][ T7443] el0_svc+0x58/0x168 [ 756.671653][ T7443] el0t_64_sync_handler+0x84/0xf0 [ 756.672884][ T7443] el0t_64_sync+0x18c/0x190 00:12:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) [ 756.764054][ T7527] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x2c000000}, 0x0) 00:12:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) (fail_nth: 7) 00:12:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x1bc, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x143, 0x33, @beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_a, @device_a, @initial, {0xd, 0x8}}, 0x7, @default, 0x200, @void, @void, @void, @void, @val={0x6, 0x2, 0x82}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x8, 0xf9, 0xd, 0x8}}, [{0xdd, 0x6e, "9d7372fe221fdaff6a86aacc75774036390ce4592f60b0908d022755599976d4a01eab35055fb969630c40c7d9e39b73d90f948338061b7404b87aada9a02073189be744814846b660fa659a7db08f26a94e907c49a23d8e2bb862e55d784b6ec58e51a17d74e7f0689c21582f3b"}, {0xdd, 0x9a, "ab673aab4b1d3e9df55b94fc7753a77adb424d42d6c7e86d49f89202304bfbad38d2480c4df9a605f1cbbd43cc94419549a3a32fbacf0f1a22a585eb0c1eec3c189746f07fb4487cada6593b3cad2af13a630ed3aa3ee935fe960ebd75175ff1435e202c2b7ce21d963e15986a37b9d4910db501073c814fa3353c67510177fbaf075b75abb173bbcf8091a8c680ddcc79afc0a3885bcddead83"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x9c62ad3976b00e91}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd53}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x90}, 0x40890) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040044}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={r3, 0x5, 0x5c11, 0x1000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xf90, 0x6}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000101}, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x2c}}, 0x0) [ 756.894591][ T7561] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.2'. [ 756.929402][ T7562] FAULT_INJECTION: forcing a failure. [ 756.929402][ T7562] name failslab, interval 1, probability 0, space 0, times 0 00:12:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 756.953785][ T7562] CPU: 1 PID: 7562 Comm: syz-executor.0 Not tainted 6.1.70-syzkaller #0 [ 756.955775][ T7562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 756.958240][ T7562] Call trace: [ 756.959078][ T7562] dump_backtrace+0x1c8/0x1f4 [ 756.960096][ T7562] show_stack+0x2c/0x3c [ 756.961165][ T7562] dump_stack_lvl+0x108/0x170 [ 756.962234][ T7562] dump_stack+0x1c/0x58 [ 756.963337][ T7562] should_fail_ex+0x3c0/0x51c [ 756.964527][ T7562] __should_failslab+0xc8/0x128 [ 756.965688][ T7562] should_failslab+0x10/0x28 [ 756.966780][ T7562] kmem_cache_alloc+0x8c/0x37c [ 756.967928][ T7562] security_file_alloc+0x30/0x124 [ 756.969171][ T7562] __alloc_file+0xa8/0x22c [ 756.970380][ T7562] alloc_empty_file+0xa8/0x198 [ 756.971519][ T7562] alloc_file+0x64/0x55c [ 756.972513][ T7562] alloc_file_pseudo+0x1e0/0x278 [ 756.973705][ T7562] sock_alloc_file+0xb8/0x230 [ 756.974870][ T7562] __sys_socket+0x1a0/0x32c [ 756.976022][ T7562] __arm64_sys_socket+0x7c/0x94 [ 756.977239][ T7562] invoke_syscall+0x98/0x2c0 [ 756.978428][ T7562] el0_svc_common+0x138/0x258 [ 756.979591][ T7562] do_el0_svc+0x64/0x218 [ 756.980543][ T7562] el0_svc+0x58/0x168 [ 756.981375][ T7562] el0t_64_sync_handler+0x84/0xf0 [ 756.982685][ T7562] el0t_64_sync+0x18c/0x190 00:12:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r3, 0x114, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xde, 0x1}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6fe66e9b77c279b86a079c7f5633dc54a7527cf441ea41c5"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x40000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 757.154541][ T7649] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) (fail_nth: 8) 00:12:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1100}, 0x0) [ 757.263348][ T7686] FAULT_INJECTION: forcing a failure. [ 757.263348][ T7686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 757.276798][ T7686] CPU: 1 PID: 7686 Comm: syz-executor.0 Not tainted 6.1.70-syzkaller #0 [ 757.278617][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 757.281051][ T7686] Call trace: [ 757.281829][ T7686] dump_backtrace+0x1c8/0x1f4 [ 757.283011][ T7686] show_stack+0x2c/0x3c [ 757.284009][ T7686] dump_stack_lvl+0x108/0x170 [ 757.285048][ T7686] dump_stack+0x1c/0x58 [ 757.286035][ T7686] should_fail_ex+0x3c0/0x51c [ 757.287140][ T7686] should_fail+0x14/0x24 [ 757.288223][ T7686] should_fail_usercopy+0x20/0x30 [ 757.289365][ T7686] move_addr_to_kernel+0xa8/0x270 [ 757.290509][ T7686] __sys_sendto+0x254/0x504 [ 757.291588][ T7686] __arm64_sys_sendto+0xd8/0xf8 [ 757.292696][ T7686] invoke_syscall+0x98/0x2c0 [ 757.293789][ T7686] el0_svc_common+0x138/0x258 [ 757.294844][ T7686] do_el0_svc+0x64/0x218 [ 757.295908][ T7686] el0_svc+0x58/0x168 [ 757.296894][ T7686] el0t_64_sync_handler+0x84/0xf0 00:12:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x1bc, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x143, 0x33, @beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_a, @device_a, @initial, {0xd, 0x8}}, 0x7, @default, 0x200, @void, @void, @void, @void, @val={0x6, 0x2, 0x82}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x8, 0xf9, 0xd, 0x8}}, [{0xdd, 0x6e, "9d7372fe221fdaff6a86aacc75774036390ce4592f60b0908d022755599976d4a01eab35055fb969630c40c7d9e39b73d90f948338061b7404b87aada9a02073189be744814846b660fa659a7db08f26a94e907c49a23d8e2bb862e55d784b6ec58e51a17d74e7f0689c21582f3b"}, {0xdd, 0x9a, "ab673aab4b1d3e9df55b94fc7753a77adb424d42d6c7e86d49f89202304bfbad38d2480c4df9a605f1cbbd43cc94419549a3a32fbacf0f1a22a585eb0c1eec3c189746f07fb4487cada6593b3cad2af13a630ed3aa3ee935fe960ebd75175ff1435e202c2b7ce21d963e15986a37b9d4910db501073c814fa3353c67510177fbaf075b75abb173bbcf8091a8c680ddcc79afc0a3885bcddead83"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x9c62ad3976b00e91}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd53}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x90}, 0x40890) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040044}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={r3, 0x5, 0x5c11, 0x1000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xf90, 0x6}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000101}, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x1bc, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x143, 0x33, @beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_a, @device_a, @initial, {0xd, 0x8}}, 0x7, @default, 0x200, @void, @void, @void, @void, @val={0x6, 0x2, 0x82}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x8, 0xf9, 0xd, 0x8}}, [{0xdd, 0x6e, "9d7372fe221fdaff6a86aacc75774036390ce4592f60b0908d022755599976d4a01eab35055fb969630c40c7d9e39b73d90f948338061b7404b87aada9a02073189be744814846b660fa659a7db08f26a94e907c49a23d8e2bb862e55d784b6ec58e51a17d74e7f0689c21582f3b"}, {0xdd, 0x9a, "ab673aab4b1d3e9df55b94fc7753a77adb424d42d6c7e86d49f89202304bfbad38d2480c4df9a605f1cbbd43cc94419549a3a32fbacf0f1a22a585eb0c1eec3c189746f07fb4487cada6593b3cad2af13a630ed3aa3ee935fe960ebd75175ff1435e202c2b7ce21d963e15986a37b9d4910db501073c814fa3353c67510177fbaf075b75abb173bbcf8091a8c680ddcc79afc0a3885bcddead83"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x9c62ad3976b00e91}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd53}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x90}, 0x40890) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040044}, 0x90) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={r3, 0x5, 0x5c11, 0x1000}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xf90, 0x6}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000101}, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008000) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x2c}}, 0x0) (async) [ 757.298064][ T7686] el0t_64_sync+0x18c/0x190 00:12:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r6, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x98, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1f}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80000000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x65b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e706feb3148f"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3b3}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}]}]}]}, 0xac}}, 0x10) 00:12:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x40000000}, 0x0) [ 757.396729][ T7700] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x0) [ 757.467048][ T7765] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r6, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x98, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1f}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80000000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x65b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e706feb3148f"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3b3}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}]}]}]}, 0xac}}, 0x10) 00:12:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c00}, 0x0) 00:12:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x1bc, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x143, 0x33, @beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_a, @device_a, @initial, {0xd, 0x8}}, 0x7, @default, 0x200, @void, @void, @void, @void, @val={0x6, 0x2, 0x82}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x8, 0xf9, 0xd, 0x8}}, [{0xdd, 0x6e, "9d7372fe221fdaff6a86aacc75774036390ce4592f60b0908d022755599976d4a01eab35055fb969630c40c7d9e39b73d90f948338061b7404b87aada9a02073189be744814846b660fa659a7db08f26a94e907c49a23d8e2bb862e55d784b6ec58e51a17d74e7f0689c21582f3b"}, {0xdd, 0x9a, "ab673aab4b1d3e9df55b94fc7753a77adb424d42d6c7e86d49f89202304bfbad38d2480c4df9a605f1cbbd43cc94419549a3a32fbacf0f1a22a585eb0c1eec3c189746f07fb4487cada6593b3cad2af13a630ed3aa3ee935fe960ebd75175ff1435e202c2b7ce21d963e15986a37b9d4910db501073c814fa3353c67510177fbaf075b75abb173bbcf8091a8c680ddcc79afc0a3885bcddead83"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x9c62ad3976b00e91}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd53}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x90}, 0x40890) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040044}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={r3, 0x5, 0x5c11, 0x1000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xf90, 0x6}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000101}, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x1bc, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x143, 0x33, @beacon={@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x4}, @device_a, @device_a, @initial, {0xd, 0x8}}, 0x7, @default, 0x200, @void, @void, @void, @void, @val={0x6, 0x2, 0x82}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x8, 0xf9, 0xd, 0x8}}, [{0xdd, 0x6e, "9d7372fe221fdaff6a86aacc75774036390ce4592f60b0908d022755599976d4a01eab35055fb969630c40c7d9e39b73d90f948338061b7404b87aada9a02073189be744814846b660fa659a7db08f26a94e907c49a23d8e2bb862e55d784b6ec58e51a17d74e7f0689c21582f3b"}, {0xdd, 0x9a, "ab673aab4b1d3e9df55b94fc7753a77adb424d42d6c7e86d49f89202304bfbad38d2480c4df9a605f1cbbd43cc94419549a3a32fbacf0f1a22a585eb0c1eec3c189746f07fb4487cada6593b3cad2af13a630ed3aa3ee935fe960ebd75175ff1435e202c2b7ce21d963e15986a37b9d4910db501073c814fa3353c67510177fbaf075b75abb173bbcf8091a8c680ddcc79afc0a3885bcddead83"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x9c62ad3976b00e91}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xd53}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x90}, 0x40890) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x7a}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040044}, 0x90) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000500)={r3, 0x5, 0x5c11, 0x1000}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r7, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xf90, 0x6}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000101}, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008000) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x40}]}, 0x2c}}, 0x0) (async) [ 757.687279][ T7827] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, r6, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x98, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1f}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80000000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xffff}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3ff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x65b}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="e706feb3148f"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x3b3}, @NL80211_BAND_LC={0x8, 0x5, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x8}]}]}]}, 0xac}}, 0x10) [ 757.819391][ T5168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.821407][ T5168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) [ 757.961776][ T7909] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x60000000}, 0x0) 00:12:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x2, 0x0) 00:12:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2d0b}, 0x0) 00:12:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) [ 758.085182][ T7954] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x7c}}}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x38}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) 00:12:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd26, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff}, @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) 00:12:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 00:12:38 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd26, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff}, @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) [ 758.480310][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.482261][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x3, 0x0) 00:12:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x7c}}}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x38}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x7c}}}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x38}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) (async) 00:12:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 00:12:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x8591afeb}, 0x0) 00:12:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd26, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1ff}, @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) [ 759.050681][ T5551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.052812][ T5551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x7c}}}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x38}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) 00:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 00:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x9, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x5, 0x0) 00:12:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240014eba6bff67ae604000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000100007800c0003000000000000000000"], 0x24}}, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x32c, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdb, 0x3, "ae511219baf96a2595f7391bae7e22d93291875e97adff0c0a986fd32fc275450c7ba65d6119576c31d1a8a11a3cd4d8432479ec99337efa60315fdc1606581ecc1ae318ecc96d232375e40e714628ac04f6f223500d577d38337df37ecdca8eb112fb4fd52f438332fc5bbb7035158f5d2a7fb39bda56681dbf68b237eb3bd7f3adef1d8f95c226aff957796aeff04ffe1a97cd6af3068242ab33ef3887e0cfaea75f90895e6e54db8189c273c75e0cfea9c0a4f0eb1e78f79a525ffee787b445d8efc01b44c3dc9a844453d625a475576f56b7202389"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1f5bb079a36302be20ff3f9827b78a437214f48579d20b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfef}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ca}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ef2a1209de1da947559af11443c1b8d53b5e92577bd90a6b2d1ac9a6d5b6b13661"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "742fd3e2da664cda82bb91aeaa9a152e1b33c693895af843b902"}}]}]}, 0x32c}}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) 00:12:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xe7030000}, 0x0) 00:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xf, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05002dfffffa08000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2204a100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r7, 0x200, 0x7fff, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8000, 0x62}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4a051}, 0x80) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 00:12:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240014eba6bff67ae604000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000100007800c0003000000000000000000"], 0x24}}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x32c, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdb, 0x3, "ae511219baf96a2595f7391bae7e22d93291875e97adff0c0a986fd32fc275450c7ba65d6119576c31d1a8a11a3cd4d8432479ec99337efa60315fdc1606581ecc1ae318ecc96d232375e40e714628ac04f6f223500d577d38337df37ecdca8eb112fb4fd52f438332fc5bbb7035158f5d2a7fb39bda56681dbf68b237eb3bd7f3adef1d8f95c226aff957796aeff04ffe1a97cd6af3068242ab33ef3887e0cfaea75f90895e6e54db8189c273c75e0cfea9c0a4f0eb1e78f79a525ffee787b445d8efc01b44c3dc9a844453d625a475576f56b7202389"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1f5bb079a36302be20ff3f9827b78a437214f48579d20b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfef}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ca}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ef2a1209de1da947559af11443c1b8d53b5e92577bd90a6b2d1ac9a6d5b6b13661"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "742fd3e2da664cda82bb91aeaa9a152e1b33c693895af843b902"}}]}]}, 0x32c}}, 0x40000) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) [ 759.646882][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.659015][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05002dfffffa08000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2204a100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r7, 0x200, 0x7fff, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8000, 0x62}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4a051}, 0x80) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05002dfffffa08000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) write(r6, &(0x7f0000004200)='t', 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2204a100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r7, 0x200, 0x7fff, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8000, 0x62}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4a051}, 0x80) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) 00:12:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0xb, 0x0) 00:12:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x24, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 00:12:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xebaf9185}, 0x0) 00:12:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240014eba6bff67ae604000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000100007800c0003000000000000000000"], 0x24}}, 0x0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x32c, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdb, 0x3, "ae511219baf96a2595f7391bae7e22d93291875e97adff0c0a986fd32fc275450c7ba65d6119576c31d1a8a11a3cd4d8432479ec99337efa60315fdc1606581ecc1ae318ecc96d232375e40e714628ac04f6f223500d577d38337df37ecdca8eb112fb4fd52f438332fc5bbb7035158f5d2a7fb39bda56681dbf68b237eb3bd7f3adef1d8f95c226aff957796aeff04ffe1a97cd6af3068242ab33ef3887e0cfaea75f90895e6e54db8189c273c75e0cfea9c0a4f0eb1e78f79a525ffee787b445d8efc01b44c3dc9a844453d625a475576f56b7202389"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1f5bb079a36302be20ff3f9827b78a437214f48579d20b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfef}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ca}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ef2a1209de1da947559af11443c1b8d53b5e92577bd90a6b2d1ac9a6d5b6b13661"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "742fd3e2da664cda82bb91aeaa9a152e1b33c693895af843b902"}}]}]}, 0x32c}}, 0x40000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (async) write(r1, &(0x7f0000004200)='t', 0x1) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240014eba6bff67ae604000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000014000000100007800c0003000000000000000000"], 0x24}}, 0x0) (async) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)={0x32c, r4, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdb, 0x3, "ae511219baf96a2595f7391bae7e22d93291875e97adff0c0a986fd32fc275450c7ba65d6119576c31d1a8a11a3cd4d8432479ec99337efa60315fdc1606581ecc1ae318ecc96d232375e40e714628ac04f6f223500d577d38337df37ecdca8eb112fb4fd52f438332fc5bbb7035158f5d2a7fb39bda56681dbf68b237eb3bd7f3adef1d8f95c226aff957796aeff04ffe1a97cd6af3068242ab33ef3887e0cfaea75f90895e6e54db8189c273c75e0cfea9c0a4f0eb1e78f79a525ffee787b445d8efc01b44c3dc9a844453d625a475576f56b7202389"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "1f5bb079a36302be20ff3f9827b78a437214f48579d20b"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfef}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ca}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffeff}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "ef2a1209de1da947559af11443c1b8d53b5e92577bd90a6b2d1ac9a6d5b6b13661"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "742fd3e2da664cda82bb91aeaa9a152e1b33c693895af843b902"}}]}]}, 0x32c}}, 0x40000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) (async) 00:12:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 00:12:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05002dfffffa08000300", @ANYRES32=r4, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r10, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2204a100}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r7, 0x200, 0x7fff, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8000, 0x62}}}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x9}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x29}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4a051}, 0x80) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) [ 760.177146][ T5662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.179069][ T5662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="a30000007ab428a89fe0e8e13dd992357d31ae820b3cdc0f2fab2ef2907536512e8d6266007609d905e9768f062cfdca1b5c52ea5a28688244fc85aa5b042c437c339fd74cb777b957fdb38ec768415cc32e6b56c961948ac1e478ceab754f62dc0fbe13a9e42e778181afc6ecac07a090bb", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYBLOB="4c5d4c63ab560f38f684b8a39487ad1b4c36f9fa0836834f74cbbf61d789ae8562c85aa272017abd436084b982bc192bd86a2ab98d4a3f098a9466060a83c514651aab0ee345085424594e9eea1e8db2d10ebc58fb3cfe8a2c36e1adb1ecc10373555287e766e3f5cdea270ac2d022df78c38b9d3988d8d466ab4c4c89b90835c11d30993de51a5fca9e781abe21c1a3b89fe260ac54528156c49f26a80c277deae2c7447cea917a95ab42354b580a7b92fe38bd18ceba1e6c67d19d6a276286e3ea521689c3e38ea25b0c", @ANYBLOB="08002600001200000800570000000000"], 0x2c}}, 0x0) 00:12:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0xf, 0x0) 00:12:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="07fffffb006d3eacb1a3a3e271bd0726dc56a77813852530bf8c0946d67a680d181d7c347627d0291b21f8de41e56fa4b4a26b5d019ebaec61ec147324376a271aa2096f29f5b6363670c24162afe97a8b8f0c6d6e70aa8b1d7245337ee5bd579e8cdd6ba111e853df90d1e91a9285e75e3299e7308cd9a50ef34928cd2c735acd0f94cf89bdf7733e1819f676439eddf060c41f05f7d60e66de51470e94c1616ccd4847916bb44728a0af3d34ec362d38425dd5f22573"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100012}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b6c37e4fbfa65f6784c6512764c06170"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b101f3ac50a072248969a3bccb46d6ec"}]}, 0x54}, 0x1, 0x0, 0x0, 0x1000}, 0x800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000380)='wlan0\x00', 0x0, 0x0, 0x0) 00:12:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 00:12:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xf0ffffff}, 0x0) 00:12:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 00:12:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="a30000007ab428a89fe0e8e13dd992357d31ae820b3cdc0f2fab2ef2907536512e8d6266007609d905e9768f062cfdca1b5c52ea5a28688244fc85aa5b042c437c339fd74cb777b957fdb38ec768415cc32e6b56c961948ac1e478ceab754f62dc0fbe13a9e42e778181afc6ecac07a090bb", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYBLOB="4c5d4c63ab560f38f684b8a39487ad1b4c36f9fa0836834f74cbbf61d789ae8562c85aa272017abd436084b982bc192bd86a2ab98d4a3f098a9466060a83c514651aab0ee345085424594e9eea1e8db2d10ebc58fb3cfe8a2c36e1adb1ecc10373555287e766e3f5cdea270ac2d022df78c38b9d3988d8d466ab4c4c89b90835c11d30993de51a5fca9e781abe21c1a3b89fe260ac54528156c49f26a80c277deae2c7447cea917a95ab42354b580a7b92fe38bd18ceba1e6c67d19d6a276286e3ea521689c3e38ea25b0c", @ANYBLOB="08002600001200000800570000000000"], 0x2c}}, 0x0) [ 760.688081][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 760.689969][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x11, 0x0) 00:12:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="07fffffb006d3eacb1a3a3e271bd0726dc56a77813852530bf8c0946d67a680d181d7c347627d0291b21f8de41e56fa4b4a26b5d019ebaec61ec147324376a271aa2096f29f5b6363670c24162afe97a8b8f0c6d6e70aa8b1d7245337ee5bd579e8cdd6ba111e853df90d1e91a9285e75e3299e7308cd9a50ef34928cd2c735acd0f94cf89bdf7733e1819f676439eddf060c41f05f7d60e66de51470e94c1616ccd4847916bb44728a0af3d34ec362d38425dd5f22573"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) (async) write(r4, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100012}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b6c37e4fbfa65f6784c6512764c06170"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b101f3ac50a072248969a3bccb46d6ec"}]}, 0x54}, 0x1, 0x0, 0x0, 0x1000}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000380)='wlan0\x00', 0x0, 0x0, 0x0) 00:12:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:12:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="a30000007ab428a89fe0e8e13dd992357d31ae820b3cdc0f2fab2ef2907536512e8d6266007609d905e9768f062cfdca1b5c52ea5a28688244fc85aa5b042c437c339fd74cb777b957fdb38ec768415cc32e6b56c961948ac1e478ceab754f62dc0fbe13a9e42e778181afc6ecac07a090bb", @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYBLOB="4c5d4c63ab560f38f684b8a39487ad1b4c36f9fa0836834f74cbbf61d789ae8562c85aa272017abd436084b982bc192bd86a2ab98d4a3f098a9466060a83c514651aab0ee345085424594e9eea1e8db2d10ebc58fb3cfe8a2c36e1adb1ecc10373555287e766e3f5cdea270ac2d022df78c38b9d3988d8d466ab4c4c89b90835c11d30993de51a5fca9e781abe21c1a3b89fe260ac54528156c49f26a80c277deae2c7447cea917a95ab42354b580a7b92fe38bd18ceba1e6c67d19d6a276286e3ea521689c3e38ea25b0c", @ANYBLOB="08002600001200000800570000000000"], 0x2c}}, 0x0) 00:12:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xfcffffff}, 0x0) [ 761.069242][ T5168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.071148][ T5168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 00:12:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x600, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x71, 0x0) 00:12:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="07fffffb006d3eacb1a3a3e271bd0726dc56a77813852530bf8c0946d67a680d181d7c347627d0291b21f8de41e56fa4b4a26b5d019ebaec61ec147324376a271aa2096f29f5b6363670c24162afe97a8b8f0c6d6e70aa8b1d7245337ee5bd579e8cdd6ba111e853df90d1e91a9285e75e3299e7308cd9a50ef34928cd2c735acd0f94cf89bdf7733e1819f676439eddf060c41f05f7d60e66de51470e94c1616ccd4847916bb44728a0af3d34ec362d38425dd5f22573"], 0x24}}, 0x0) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100012}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b6c37e4fbfa65f6784c6512764c06170"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b101f3ac50a072248969a3bccb46d6ec"}]}, 0x54}, 0x1, 0x0, 0x0, 0x1000}, 0x800) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000380)='wlan0\x00', 0x0, 0x0, 0x0) 00:12:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x64, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20008891) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x400, 0xe4c3, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 00:12:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, r5, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x59, 0x5b, "457820dc21f54272456ab5a42354273ce1eea7ef63ff365002d4cfd9af0683ed6cdb0f1aa811b7ef47a7c0fae79152e866559a4a6a02ad6fe730c15b75973a009778d6f430e62636182fbd2c9a1840ed6cf4b5ad0f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7ff}, @NL80211_ATTR_FRAME_MATCH={0x90, 0x5b, "e0b1992756f4395549a943b10ddce86dc5a154f7fa29dc1fe08c8d4697f9a0ea009f1b02d52b96cd036af52416c250b871754df4adc8fce6d1b602b80e3a0884ff975b93184338f227e73c65b49efe4f9eb5fc154b008d5bec711e58712fb97f275b1536ae1c9c478f09e521469fae65b363fdda7f4ccc20e0573a91f49ae74882db5caba2ae59e1143cfcfd"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x40080}, 0x40040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0xffffff99, 0x0) [ 761.404981][ T9146] __nla_validate_parse: 22 callbacks suppressed [ 761.404996][ T9146] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 761.426429][ T9157] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x900, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xffffff7f}, 0x0) 00:12:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 00:12:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x64, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20008891) (async) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x64, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20008891) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x400, 0xe4c3, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x400, 0xe4c3, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) [ 761.577998][ T9253] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x2) 00:12:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, r5, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x59, 0x5b, "457820dc21f54272456ab5a42354273ce1eea7ef63ff365002d4cfd9af0683ed6cdb0f1aa811b7ef47a7c0fae79152e866559a4a6a02ad6fe730c15b75973a009778d6f430e62636182fbd2c9a1840ed6cf4b5ad0f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7ff}, @NL80211_ATTR_FRAME_MATCH={0x90, 0x5b, "e0b1992756f4395549a943b10ddce86dc5a154f7fa29dc1fe08c8d4697f9a0ea009f1b02d52b96cd036af52416c250b871754df4adc8fce6d1b602b80e3a0884ff975b93184338f227e73c65b49efe4f9eb5fc154b008d5bec711e58712fb97f275b1536ae1c9c478f09e521469fae65b363fdda7f4ccc20e0573a91f49ae74882db5caba2ae59e1143cfcfd"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x40080}, 0x40040) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, r5, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x59, 0x5b, "457820dc21f54272456ab5a42354273ce1eea7ef63ff365002d4cfd9af0683ed6cdb0f1aa811b7ef47a7c0fae79152e866559a4a6a02ad6fe730c15b75973a009778d6f430e62636182fbd2c9a1840ed6cf4b5ad0f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7ff}, @NL80211_ATTR_FRAME_MATCH={0x90, 0x5b, "e0b1992756f4395549a943b10ddce86dc5a154f7fa29dc1fe08c8d4697f9a0ea009f1b02d52b96cd036af52416c250b871754df4adc8fce6d1b602b80e3a0884ff975b93184338f227e73c65b49efe4f9eb5fc154b008d5bec711e58712fb97f275b1536ae1c9c478f09e521469fae65b363fdda7f4ccc20e0573a91f49ae74882db5caba2ae59e1143cfcfd"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x40080}, 0x40040) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) (async) 00:12:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) [ 761.689916][ T9268] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.2'. [ 761.750140][ T9302] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.1'. [ 761.771487][ T9299] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 00:12:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) (async) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x64, r5, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xe}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x20008891) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x400, 0xe4c3, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) [ 761.992622][ T5168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.998035][ T5168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x2400, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x3) 00:12:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r8, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, r5, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x59, 0x5b, "457820dc21f54272456ab5a42354273ce1eea7ef63ff365002d4cfd9af0683ed6cdb0f1aa811b7ef47a7c0fae79152e866559a4a6a02ad6fe730c15b75973a009778d6f430e62636182fbd2c9a1840ed6cf4b5ad0f"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7ff}, @NL80211_ATTR_FRAME_MATCH={0x90, 0x5b, "e0b1992756f4395549a943b10ddce86dc5a154f7fa29dc1fe08c8d4697f9a0ea009f1b02d52b96cd036af52416c250b871754df4adc8fce6d1b602b80e3a0884ff975b93184338f227e73c65b49efe4f9eb5fc154b008d5bec711e58712fb97f275b1536ae1c9c478f09e521469fae65b363fdda7f4ccc20e0573a91f49ae74882db5caba2ae59e1143cfcfd"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x40080}, 0x40040) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xfffffff0}, 0x0) [ 762.147330][ T9443] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) [ 762.232327][ T9505] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="e1bc8f6f", @ANYRES16=r4, @ANYBLOB="050000000000000000002e000000050019010c000000"], 0x1c}}, 0x10) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x50000, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe0}]}, 0x64}, 0x1, 0x0, 0x0, 0x54}, 0x4001) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x4) 00:12:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, r6, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="353990707940df8c804ef9ff1837e92b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8d3297dd8384890a67d0605666ff3d78"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7ff}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="160be450e15f33ecb496c173a1f12e5e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e6a5c468cb1da5e362014ac5cf4c51d6"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2b01aa456bcb05ed5286a4c08d0f96c4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="41f10aa190241d5a7f4b76a6e57ad3b8"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1cc8014c7386e9f3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f0b00acd2573cf15"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1137a537079a27c6dec0db8637a52c91cbd7cd8186d03154"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ee4f438faaea2552"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2008000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bb2a763ce574cd84f726e850221dbb3c4086b2d9c6f6e2eb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d4bec1f0c329191304fa879fb3ef8ffd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "164dcc4bafcd1c6a"}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40055}, 0x48080) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ac94bb506a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x3c}}, 0x0) [ 762.352183][ T9521] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.1'. [ 762.408217][ T9533] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x5) 00:12:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 00:12:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="e1bc8f6f", @ANYRES16=r4, @ANYBLOB="050000000000000000002e000000050019010c000000"], 0x1c}}, 0x10) (async, rerun: 64) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x50000, 0x0) (rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe0}]}, 0x64}, 0x1, 0x0, 0x0, 0x54}, 0x4001) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x6000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x6) 00:12:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xfffffffc}, 0x0) 00:12:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, r6, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="353990707940df8c804ef9ff1837e92b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8d3297dd8384890a67d0605666ff3d78"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7ff}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="160be450e15f33ecb496c173a1f12e5e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e6a5c468cb1da5e362014ac5cf4c51d6"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2b01aa456bcb05ed5286a4c08d0f96c4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="41f10aa190241d5a7f4b76a6e57ad3b8"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1cc8014c7386e9f3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f0b00acd2573cf15"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1137a537079a27c6dec0db8637a52c91cbd7cd8186d03154"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ee4f438faaea2552"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2008000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bb2a763ce574cd84f726e850221dbb3c4086b2d9c6f6e2eb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d4bec1f0c329191304fa879fb3ef8ffd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "164dcc4bafcd1c6a"}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40055}, 0x48080) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ac94bb506a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, r6, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="353990707940df8c804ef9ff1837e92b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8d3297dd8384890a67d0605666ff3d78"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7ff}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="160be450e15f33ecb496c173a1f12e5e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e6a5c468cb1da5e362014ac5cf4c51d6"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2b01aa456bcb05ed5286a4c08d0f96c4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="41f10aa190241d5a7f4b76a6e57ad3b8"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1cc8014c7386e9f3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f0b00acd2573cf15"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1137a537079a27c6dec0db8637a52c91cbd7cd8186d03154"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ee4f438faaea2552"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2008000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bb2a763ce574cd84f726e850221dbb3c4086b2d9c6f6e2eb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d4bec1f0c329191304fa879fb3ef8ffd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "164dcc4bafcd1c6a"}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40055}, 0x48080) (async) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ac94bb506a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x3c}}, 0x0) (async) 00:12:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="e1bc8f6f", @ANYRES16=r4, @ANYBLOB="050000000000000000002e000000050019010c000000"], 0x1c}}, 0x10) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280), 0x50000, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) sendmsg$NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe0}]}, 0x64}, 0x1, 0x0, 0x0, 0x54}, 0x4001) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x7) 00:12:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x30000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) 00:12:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x8) 00:12:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x34000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x15c, r6, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="353990707940df8c804ef9ff1837e92b"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8d3297dd8384890a67d0605666ff3d78"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7ff}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="160be450e15f33ecb496c173a1f12e5e"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="e6a5c468cb1da5e362014ac5cf4c51d6"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2b01aa456bcb05ed5286a4c08d0f96c4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="41f10aa190241d5a7f4b76a6e57ad3b8"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1cc8014c7386e9f3"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f0b00acd2573cf15"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1137a537079a27c6dec0db8637a52c91cbd7cd8186d03154"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ee4f438faaea2552"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2008000}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="bb2a763ce574cd84f726e850221dbb3c4086b2d9c6f6e2eb"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d4bec1f0c329191304fa879fb3ef8ffd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "164dcc4bafcd1c6a"}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40055}, 0x48080) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r2, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x5f}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ac94bb506a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}, 0x3c}}, 0x0) 00:12:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x9) 00:12:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x400300, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0xffffb285c8a8}, 0x0) 00:12:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 00:12:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0xa) 00:12:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:43 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r0, @ANYBLOB="0800e7fd8ae7e27f374400575a33eecb"], 0x2c}, 0x1, 0x0, 0x0, 0x8091}, 0x20004000) 00:12:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0xb) 00:12:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x2000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11000000}, 0x0) 00:12:43 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) (async) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r0, @ANYBLOB="0800e7fd8ae7e27f374400575a33eecb"], 0x2c}, 0x1, 0x0, 0x0, 0x8091}, 0x20004000) 00:12:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) 00:12:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x2000000000000}, 0x0) 00:12:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0xc) 00:12:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x3000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x9) 00:12:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2c000000}, 0x0) 00:12:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x4000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0xd) 00:12:43 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) (async) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) (async) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYRES16=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r0, @ANYBLOB="0800e7fd8ae7e27f374400575a33eecb"], 0x2c}, 0x1, 0x0, 0x0, 0x8091}, 0x20004000) 00:12:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x2) 00:12:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0xe) 00:12:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x5000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2d0b0000}, 0x0) 00:12:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0xf) [ 764.170604][ T5551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.172767][ T5551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="080026000000ffff08745fb8c2005700"], 0x2c}}, 0x0) 00:12:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x3000000000000}, 0x0) 00:12:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x10) 00:12:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x6000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x2) 00:12:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x11) 00:12:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 00:12:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x7000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x12) 00:12:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="080026000000ffff08745fb8c2005700"], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="080026000000ffff08745fb8c2005700"], 0x2c}}, 0x0) [ 764.549325][ T5551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.551331][ T5551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x8000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x18) 00:12:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) 00:12:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x5, 0x0) 00:12:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 00:12:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x24) 00:12:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x9000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="080026000000ffff08745fb8c2005700"], 0x2c}}, 0x0) 00:12:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xf000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x25) 00:12:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) [ 765.126315][T10438] ------------[ cut here ]------------ [ 765.127997][T10438] WARNING: CPU: 1 PID: 10438 at net/mac80211/offchannel.c:403 ieee80211_start_next_roc+0x1d4/0x21c [ 765.130430][T10438] Modules linked in: [ 765.131444][T10438] CPU: 1 PID: 10438 Comm: syz-executor.1 Not tainted 6.1.70-syzkaller #0 [ 765.133485][T10438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 765.135898][T10438] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 765.137753][T10438] pc : ieee80211_start_next_roc+0x1d4/0x21c [ 765.139138][T10438] lr : ieee80211_start_next_roc+0x1d4/0x21c [ 765.140554][T10438] sp : ffff80001e6a6f50 [ 765.141461][T10438] x29: ffff80001e6a6f50 x28: 0000000000000001 x27: dfff800000000000 [ 765.143417][T10438] x26: ffff0000c45fc000 x25: ffff00012af62c78 x24: ffff00012af62bb8 [ 765.145389][T10438] x23: ffff00012955d5b8 x22: ffff0000cb786800 x21: dfff800000000000 [ 765.147207][T10438] x20: 0000000000000001 x19: ffff00012af60ea0 x18: 1fffe00036870376 [ 765.149084][T10438] x17: ffff80001581d000 x16: ffff8000084fa434 x15: 0000000000000002 [ 765.151069][T10438] x14: 1ffff00002b040b0 x13: dfff800000000000 x12: 0000000000040000 [ 765.152955][T10438] x11: 000000000000c812 x10: ffff80001e8da000 x9 : ffff8000119f11b0 [ 765.154899][T10438] x8 : 000000000000c813 x7 : ffff800011a11624 x6 : 0000000000000000 [ 765.156895][T10438] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000122168cc [ 765.158887][T10438] x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 [ 765.160824][T10438] Call trace: [ 765.161567][T10438] ieee80211_start_next_roc+0x1d4/0x21c [ 765.162811][T10438] __ieee80211_scan_completed+0x6ec/0xa88 [ 765.164221][T10438] ieee80211_scan_cancel+0x108/0x70c [ 765.165478][T10438] ieee80211_do_stop+0x148/0x1994 [ 765.166684][T10438] ieee80211_if_change_type+0x478/0xcf4 [ 765.168053][T10438] ieee80211_change_iface+0x6c/0x418 [ 765.169330][T10438] cfg80211_change_iface+0x758/0x100c [ 765.170575][T10438] nl80211_set_interface+0x3f8/0x6f0 [ 765.171913][T10438] genl_rcv_msg+0x948/0xc2c [ 765.173005][T10438] netlink_rcv_skb+0x20c/0x3b8 [ 765.174124][T10438] genl_rcv+0x38/0x50 [ 765.175119][T10438] netlink_unicast+0x65c/0x898 [ 765.176479][T10438] netlink_sendmsg+0x834/0xb18 [ 765.177636][T10438] __sys_sendto+0x3b4/0x504 [ 765.178784][T10438] __arm64_sys_sendto+0xd8/0xf8 [ 765.179876][T10438] invoke_syscall+0x98/0x2c0 [ 765.180968][T10438] el0_svc_common+0x138/0x258 [ 765.182124][T10438] do_el0_svc+0x64/0x218 [ 765.183122][T10438] el0_svc+0x58/0x168 [ 765.184084][T10438] el0t_64_sync_handler+0x84/0xf0 [ 765.185205][T10438] el0t_64_sync+0x18c/0x190 [ 765.186349][T10438] irq event stamp: 2570 [ 765.187271][T10438] hardirqs last enabled at (2569): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 765.189845][T10438] hardirqs last disabled at (2570): [] el1_dbg+0x24/0x80 [ 765.191797][T10438] softirqs last enabled at (2566): [] ieee80211_configure_filter+0x628/0x1364 [ 765.194311][T10438] softirqs last disabled at (2564): [] ieee80211_configure_filter+0x3fc/0x1364 [ 765.196812][T10438] ---[ end trace 0000000000000000 ]--- 00:12:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = dup(r0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x600300}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x9c4, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_PROBE_RESP={0x5d5, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x121, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_b, @broadcast, @initial, {0x9, 0x81}}, @ver_80211n={0x0, 0x7f80, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x7, @random=0xd8, 0x2014, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x6}, {0x6c}, {0x30}]}, @val={0x3, 0x1, 0x95}, @val={0x4, 0x6, {0x2, 0x1, 0x7, 0x5}}, @void, @val={0x5, 0xb1, {0x7, 0x44, 0x7, "d39f88b98c05851769f33174ec9ec2e38e7b702089a006ed964f44516dc260397e3714087d63bd21c671bc3bdaf56779bb8599edd480cbb8588796173c38762c9577b54a072e2c9d2c9e96e5263052167c92ff3382c8a369132d0d234bfa20451e21b539d69db1b795dd1a629460c5d3730dd031d47cc461b3b0b374a4aec42824bc7f99ce1ff67e1cc193f9f4e353f31fdc2aaf935f095819a99d367d4e553233f9c33421225a68932f06a1b86c"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x6c, 0x8}}, @val={0x2d, 0x1a, {0x40, 0x0, 0x5, 0x0, {0x9, 0x1, 0x0, 0x80, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x400, 0x6021f75a, 0x7}}, @void, @void, @val={0x76, 0x6, {0x4, 0xc, 0x6, 0x8}}}}, @NL80211_ATTR_BEACON_HEAD={0x2b4, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @device_b, @random="91b7b5ef2805", {0x3, 0x1ec}}, 0xffff, @random=0x2, 0xd200, @void, @val={0x1, 0x8, [{0xc}, {0x2, 0x1}, {0x1b}, {0x3}, {0x24}, {0x1b, 0x1}, {0x4}, {0x18, 0x1}]}, @val={0x3, 0x1, 0xb}, @void, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x0, 0x5, 0x5}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x8, 0x68, 0x40}}, @val={0x2d, 0x1a, {0x10, 0x1, 0x3, 0x0, {0x8, 0x9, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x20}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x70}}, @void, [{0xdd, 0x3d, "608cb4d01ee88a34296010cabbf8ccc338e1fb050b568873d82b1314bb5f1ee464ffbecdf7cdb82e3e4aa7311317a6c8de59b59e984d767d9d30cc7c56"}, {0xdd, 0xd9, "b3cb617a2a8de8bcbc01c8c55b3a47007cf9b1328a1ff078d1d1780827046f04dab56d5ece832e0e523ff5ca3f0e0d8638c9b7c1f4bee3a96f38dfcac22fc405342324ba542a9a01cfd28e38891765743db81f98b02bd30ed27360fd95dddcb10925cc85bb85fe1d1115b106bc1089bae58c85be0a260f1fbb10a42668a06e7ec9f3fcb42523e48930b6d9ed512fb2b9b2d9b9383cf8cc6fae4dbbac189abf38ff40559c71b9aa736a9604bb852b2423d7f0080e879921ce8be2105a271c857f4e3ad7b142b85f4d8cf33d6b1fbe5dfabf027848ca26163c42"}, {0xdd, 0x77, "c276d4f7da77a825054cc1d1d984c0829ae08418fa8c5c8f266c514d9a0222e4aea33428d764b04f015f82aff42c96c287e9ad7e7970bb3de114bc2886689a0b5848d67644ed27ed58699756b8728006f537ecaa61f5fd87a25813b48d60958dd739cd70bdbba0713e7d77bf82cbb3cbb05e83860e96a5"}, {0xdd, 0xb3, "9845976234054c687203bddb1338e7709066cc90eeb342a78b0da49acaf7846bc08c407ff95ecd1150963502d8994a2cd243510e56cf4c2b5976b06f6517154aea73a69a9090907d89763b2d02ee06cadb54cfc3d288380a7c38d53f84a33fd0701e226736783552017f13d56e3650d495476423dcb4a4af771dbd1c93f3e846682b15100f6aba540d66bc573bb321169c064e892f0c22c2ae14df137be10a40672282b9ebda8c0ed92bdec80c40f6961e0c59"}]}}]]}, 0x9c4}, 0x1, 0x0, 0x0, 0x81}, 0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00\b\x00W\x00\x00\x00\x00\x00'], 0x2c}}, 0x400c010) [ 765.361195][ T1577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.363434][ T1577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x24000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x41) 00:12:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x100000000000000}, 0x0) 00:12:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 00:12:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x5, 0x0) 00:12:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = dup(r0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x600300}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x9c4, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_PROBE_RESP={0x5d5, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x121, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_b, @broadcast, @initial, {0x9, 0x81}}, @ver_80211n={0x0, 0x7f80, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x7, @random=0xd8, 0x2014, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x6}, {0x6c}, {0x30}]}, @val={0x3, 0x1, 0x95}, @val={0x4, 0x6, {0x2, 0x1, 0x7, 0x5}}, @void, @val={0x5, 0xb1, {0x7, 0x44, 0x7, "d39f88b98c05851769f33174ec9ec2e38e7b702089a006ed964f44516dc260397e3714087d63bd21c671bc3bdaf56779bb8599edd480cbb8588796173c38762c9577b54a072e2c9d2c9e96e5263052167c92ff3382c8a369132d0d234bfa20451e21b539d69db1b795dd1a629460c5d3730dd031d47cc461b3b0b374a4aec42824bc7f99ce1ff67e1cc193f9f4e353f31fdc2aaf935f095819a99d367d4e553233f9c33421225a68932f06a1b86c"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x6c, 0x8}}, @val={0x2d, 0x1a, {0x40, 0x0, 0x5, 0x0, {0x9, 0x1, 0x0, 0x80, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x400, 0x6021f75a, 0x7}}, @void, @void, @val={0x76, 0x6, {0x4, 0xc, 0x6, 0x8}}}}, @NL80211_ATTR_BEACON_HEAD={0x2b4, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @device_b, @random="91b7b5ef2805", {0x3, 0x1ec}}, 0xffff, @random=0x2, 0xd200, @void, @val={0x1, 0x8, [{0xc}, {0x2, 0x1}, {0x1b}, {0x3}, {0x24}, {0x1b, 0x1}, {0x4}, {0x18, 0x1}]}, @val={0x3, 0x1, 0xb}, @void, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x0, 0x5, 0x5}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x8, 0x68, 0x40}}, @val={0x2d, 0x1a, {0x10, 0x1, 0x3, 0x0, {0x8, 0x9, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x20}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x70}}, @void, [{0xdd, 0x3d, "608cb4d01ee88a34296010cabbf8ccc338e1fb050b568873d82b1314bb5f1ee464ffbecdf7cdb82e3e4aa7311317a6c8de59b59e984d767d9d30cc7c56"}, {0xdd, 0xd9, "b3cb617a2a8de8bcbc01c8c55b3a47007cf9b1328a1ff078d1d1780827046f04dab56d5ece832e0e523ff5ca3f0e0d8638c9b7c1f4bee3a96f38dfcac22fc405342324ba542a9a01cfd28e38891765743db81f98b02bd30ed27360fd95dddcb10925cc85bb85fe1d1115b106bc1089bae58c85be0a260f1fbb10a42668a06e7ec9f3fcb42523e48930b6d9ed512fb2b9b2d9b9383cf8cc6fae4dbbac189abf38ff40559c71b9aa736a9604bb852b2423d7f0080e879921ce8be2105a271c857f4e3ad7b142b85f4d8cf33d6b1fbe5dfabf027848ca26163c42"}, {0xdd, 0x77, "c276d4f7da77a825054cc1d1d984c0829ae08418fa8c5c8f266c514d9a0222e4aea33428d764b04f015f82aff42c96c287e9ad7e7970bb3de114bc2886689a0b5848d67644ed27ed58699756b8728006f537ecaa61f5fd87a25813b48d60958dd739cd70bdbba0713e7d77bf82cbb3cbb05e83860e96a5"}, {0xdd, 0xb3, "9845976234054c687203bddb1338e7709066cc90eeb342a78b0da49acaf7846bc08c407ff95ecd1150963502d8994a2cd243510e56cf4c2b5976b06f6517154aea73a69a9090907d89763b2d02ee06cadb54cfc3d288380a7c38d53f84a33fd0701e226736783552017f13d56e3650d495476423dcb4a4af771dbd1c93f3e846682b15100f6aba540d66bc573bb321169c064e892f0c22c2ae14df137be10a40672282b9ebda8c0ed92bdec80c40f6961e0c59"}]}}]]}, 0x9c4}, 0x1, 0x0, 0x0, 0x81}, 0x80) (async, rerun: 32) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00\b\x00W\x00\x00\x00\x00\x00'], 0x2c}}, 0x400c010) (rerun: 32) 00:12:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x40000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x5c) [ 765.707501][ T5168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 765.711067][ T5168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:12:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x60000000, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 00:12:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x60) 00:12:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x60000000}, 0x0) 00:12:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = dup(r0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x600300}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x9c4, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_PROBE_RESP={0x5d5, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x121, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_b, @broadcast, @initial, {0x9, 0x81}}, @ver_80211n={0x0, 0x7f80, 0x2, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x7, @random=0xd8, 0x2014, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x6}, {0x6c}, {0x30}]}, @val={0x3, 0x1, 0x95}, @val={0x4, 0x6, {0x2, 0x1, 0x7, 0x5}}, @void, @val={0x5, 0xb1, {0x7, 0x44, 0x7, "d39f88b98c05851769f33174ec9ec2e38e7b702089a006ed964f44516dc260397e3714087d63bd21c671bc3bdaf56779bb8599edd480cbb8588796173c38762c9577b54a072e2c9d2c9e96e5263052167c92ff3382c8a369132d0d234bfa20451e21b539d69db1b795dd1a629460c5d3730dd031d47cc461b3b0b374a4aec42824bc7f99ce1ff67e1cc193f9f4e353f31fdc2aaf935f095819a99d367d4e553233f9c33421225a68932f06a1b86c"}}, @void, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x6c, 0x8}}, @val={0x2d, 0x1a, {0x40, 0x0, 0x5, 0x0, {0x9, 0x1, 0x0, 0x80, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x400, 0x6021f75a, 0x7}}, @void, @void, @val={0x76, 0x6, {0x4, 0xc, 0x6, 0x8}}}}, @NL80211_ATTR_BEACON_HEAD={0x2b4, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @device_b, @device_b, @random="91b7b5ef2805", {0x3, 0x1ec}}, 0xffff, @random=0x2, 0xd200, @void, @val={0x1, 0x8, [{0xc}, {0x2, 0x1}, {0x1b}, {0x3}, {0x24}, {0x1b, 0x1}, {0x4}, {0x18, 0x1}]}, @val={0x3, 0x1, 0xb}, @void, @val={0x6, 0x2, 0x7}, @void, @val={0x25, 0x3, {0x0, 0x5, 0x5}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x8, 0x68, 0x40}}, @val={0x2d, 0x1a, {0x10, 0x1, 0x3, 0x0, {0x8, 0x9, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x20}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x70}}, @void, [{0xdd, 0x3d, "608cb4d01ee88a34296010cabbf8ccc338e1fb050b568873d82b1314bb5f1ee464ffbecdf7cdb82e3e4aa7311317a6c8de59b59e984d767d9d30cc7c56"}, {0xdd, 0xd9, "b3cb617a2a8de8bcbc01c8c55b3a47007cf9b1328a1ff078d1d1780827046f04dab56d5ece832e0e523ff5ca3f0e0d8638c9b7c1f4bee3a96f38dfcac22fc405342324ba542a9a01cfd28e38891765743db81f98b02bd30ed27360fd95dddcb10925cc85bb85fe1d1115b106bc1089bae58c85be0a260f1fbb10a42668a06e7ec9f3fcb42523e48930b6d9ed512fb2b9b2d9b9383cf8cc6fae4dbbac189abf38ff40559c71b9aa736a9604bb852b2423d7f0080e879921ce8be2105a271c857f4e3ad7b142b85f4d8cf33d6b1fbe5dfabf027848ca26163c42"}, {0xdd, 0x77, "c276d4f7da77a825054cc1d1d984c0829ae08418fa8c5c8f266c514d9a0222e4aea33428d764b04f015f82aff42c96c287e9ad7e7970bb3de114bc2886689a0b5848d67644ed27ed58699756b8728006f537ecaa61f5fd87a25813b48d60958dd739cd70bdbba0713e7d77bf82cbb3cbb05e83860e96a5"}, {0xdd, 0xb3, "9845976234054c687203bddb1338e7709066cc90eeb342a78b0da49acaf7846bc08c407ff95ecd1150963502d8994a2cd243510e56cf4c2b5976b06f6517154aea73a69a9090907d89763b2d02ee06cadb54cfc3d288380a7c38d53f84a33fd0701e226736783552017f13d56e3650d495476423dcb4a4af771dbd1c93f3e846682b15100f6aba540d66bc573bb321169c064e892f0c22c2ae14df137be10a40672282b9ebda8c0ed92bdec80c40f6961e0c59"}]}}]]}, 0x9c4}, 0x1, 0x0, 0x0, 0x81}, 0x80) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB='\b\x00&\x00\x00\x00\x00\x00\b\x00W\x00\x00\x00\x00\x00'], 0x2c}}, 0x400c010) 00:12:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x8de6b0de, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x200000000000000}, 0x0) 00:12:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x300) 00:12:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x2) 00:12:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xdeb0e68d, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) 00:12:46 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x2b) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x6611, 0x0) sendmmsg$unix(r2, &(0x7f0000000380)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a00), 0x0, &(0x7f0000002a80)=ANY=[@ANYRES64=r2, @ANYRES16=r3, @ANYBLOB="0dd78ae9522abada051e5280a6c492d392b483252d38b1510677c21de2791eedbac9ec9aacc070da64f8017f6d1f4e4e52f0f0e72a14d8a6b49bfa3206b8ce3838b05efca43d2f43f00bbfada9e8f7033f1651241e62b4b730503ebb27f24c9897b982fe024d235e8440b1f53bc8a8af74b6202ebd62371792acc51495abf78e98317f66a44d1140aeb14ed54412d01594b9323896dd57f13534d5b0683e7b", @ANYRES32, @ANYRES32, @ANYBLOB="00bfd61825210f91fdc12703772cdbb9e35f6f1288943cb564d56d3d051a8640d86e7287216f7f13089ff703b57a720df23e8486d7375c417d008092871326f9e39a04c14e43ab1524686eed805f1498fe2cde71fafe8a3ae5461f65aa45c2fc30da3a28d0e49d30d79978605078417425a828ddb515ba4ecab4ba1714cdd09cb90de7a2c502902c845ed5251aa9459cd9ae419148c9dc6ccd2ca3f29381d3e06d93e6", @ANYRES64=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1991bf6e3f1d0800000000000000000000000400", @ANYRES32, @ANYBLOB="08bbbf140073f2caa45dffd0ee5e4795aeb8a99063fba3b8eb7ed6b2223eff547b9aed99f5ae4ede7d049a84192cb450eb1536943f50532a4369b93c635afe28eb902c6989630558deaddb8b3d09ec417bc785bd7c3cb6b074a129e856a28a6c8294c5ea4689f342181738c795c66cc21d3324754509ed360532bb0242f95b6f4700347f4c89ca343014b810f781566c40c5be28040000000ecff15117bc42e0f796dde051a6027d94b3bedea06f1b474aaa60ee23f509bf4b7b2da85ff2ea346b7b620c96c83c3365", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES16=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0001000000010000000000000000000000000000a6817dfd616ade7311400fe3550ce9b0cb0e3788183f4d5bdc752479f783714519438daf76e210f475ab5e3ee0cc8b8098722ee035d8e917d2b0b18b217127b72190f61e7b3ba3", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRESHEX=r0], 0xa8, 0x4000}}], 0x1, 0x4000800) r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x40, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000005c0), 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000840)=""/101, 0x65}], 0x2}, 0x2060) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getsockopt(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r8 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="646d61736b3d303030da797408df9dfd611d44d29a30303030303030303030303030303030303030342c666d61736b3d30303030303030303030303030303030303030303030302c646973636172642c7569643dd9d667498e099419bd6fca8e96c296a2932c5691d6fef460ef17c587a6bb05dfdc40ce9bcd2ca64c511fcb61d566b7feea259e0ad379b4dcb0abdae7b9d10888b69a80894ebae7540a2e4390901fa1e645b60444eba1602decc0f80fcad7b3535af4df81b32f15ab225ebc5fef008ad60fa738d19631b7f9723872b7d32408a59b5a48a4b131d27e392008d7", @ANYRESHEX=r6, @ANYBLOB=',dmask=00000000000000000000153,iocharset=iso8859-1,gid=', @ANYRESHEX=r7, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB=',discard,\x00'], 0x81, 0x14f5, &(0x7f0000001580)="$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") sendmmsg$unix(r2, &(0x7f0000000c40)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xc8, 0x30000000}}, {{&(0x7f0000000ac0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000b40)="83be1b77ad8588dd7b8f737b8e2a1eae1ed6fbdc335211dfb9b0e0ab959b15abb4e47a8d946a9f230570", 0x2a}], 0x1, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r4, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r8]}}], 0x58, 0x400}}], 0x2, 0x4000) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000040)={0x0, 0x200003f000000, 0x20000000}) (fail_nth: 1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r10 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000680)="2f64f38d40419e641296ee6d169042aa08e18e00820f3c106eb714b88c216d0e8463b8ea131d1ddf573fa8873622faf967b61eea7d9aa4b4576e5d2f6a6485c2ba464a7dcf762316baed1b169e34c5c8bea1232063d6f9ec5bae6e7af1a7ac05c82319935edc487f0f45eb7040cf61aa1d5f86b886e77db1d2cf392025370e3d757baad4879ac4c6a8319e0b2f938d0079d11d695dbca0d2eb98ede0c2d726cea67b925148aa026782ee83b0cb68eeedbaf24f1a97179a6653f6f6414eba25a0c24f3ea520e3029d58f4284b5ab73fa78eb7cc06aadc3da2acbc50aa888ca08590f01a112db64f140ef584838b2c120000000000000000004910261e3becac19ffba457161a0bbf7158ce331a6d7a4ccc6064b52e960e268e9ea46dd756527025d27f7e698158c79832dc75ad658994105dd454dda017c5309a6c97954e76f68b3bbe1c5debb48f07f201c93330d06350e37dce5b2087eaea8c921360a1407f8c6dce09aea23e2dcdacc1fdfa4f543a689f5cae284bcda0563e4c9c2de8f8c736dce59c20e6a5dd89be91bdc330120e6f01369ae33f1ad36abd16f729be86973", 0x1a0, 0x44004, &(0x7f0000000280)={0xa, 0x4c23, 0x10000, @loopback, 0x99}, 0x1c) 00:12:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x3e7) 00:12:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048804}, 0x40040d3) [ 766.349434][T10963] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 767.065361][T10962] FAULT_INJECTION: forcing a failure. [ 767.065361][T10962] name failslab, interval 1, probability 0, space 0, times 0 [ 767.068395][T10962] CPU: 1 PID: 10962 Comm: syz-executor.1 Tainted: G W 6.1.70-syzkaller #0 [ 767.070643][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 767.072963][T10962] Call trace: 00:12:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xf0ffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) [ 767.073660][T10962] dump_backtrace+0x1c8/0x1f4 [ 767.074845][T10962] show_stack+0x2c/0x3c [ 767.075937][T10962] dump_stack_lvl+0x108/0x170 [ 767.077160][T10962] dump_stack+0x1c/0x58 [ 767.078099][T10962] should_fail_ex+0x3c0/0x51c [ 767.079296][T10962] __should_failslab+0xc8/0x128 [ 767.080344][T10962] should_failslab+0x10/0x28 [ 767.081348][T10962] __kmem_cache_alloc_node+0x80/0x388 [ 767.082660][T10962] __kmalloc+0xc4/0x1c4 [ 767.083685][T10962] tomoyo_realpath_from_path+0xc8/0x4cc [ 767.084965][T10962] tomoyo_path_number_perm+0x1dc/0x688 [ 767.086153][T10962] tomoyo_file_ioctl+0x2c/0x3c [ 767.087296][T10962] security_file_ioctl+0x80/0xbc [ 767.088416][T10962] __arm64_sys_ioctl+0xa8/0x1c8 [ 767.089540][T10962] invoke_syscall+0x98/0x2c0 [ 767.090571][T10962] el0_svc_common+0x138/0x258 [ 767.091676][T10962] do_el0_svc+0x64/0x218 [ 767.092744][T10962] el0_svc+0x58/0x168 [ 767.093678][T10962] el0t_64_sync_handler+0x84/0xf0 [ 767.094941][T10962] el0t_64_sync+0x18c/0x190 [ 767.096043][T10962] ERROR: Out of memory at tomoyo_realpath_from_path. 00:12:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x3) [ 767.138257][T10964] netlink: 'syz-executor.1': attribute type 4 has an invalid length. 00:12:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x500) [ 767.217531][T11026] __nla_validate_parse: 27 callbacks suppressed [ 767.217545][T11026] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:47 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x2b) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x6611, 0x0) sendmmsg$unix(r2, &(0x7f0000000380)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a00), 0x0, &(0x7f0000002a80)=ANY=[@ANYRES64=r2, @ANYRES16=r3, @ANYBLOB="0dd78ae9522abada051e5280a6c492d392b483252d38b1510677c21de2791eedbac9ec9aacc070da64f8017f6d1f4e4e52f0f0e72a14d8a6b49bfa3206b8ce3838b05efca43d2f43f00bbfada9e8f7033f1651241e62b4b730503ebb27f24c9897b982fe024d235e8440b1f53bc8a8af74b6202ebd62371792acc51495abf78e98317f66a44d1140aeb14ed54412d01594b9323896dd57f13534d5b0683e7b", @ANYRES32, @ANYRES32, @ANYBLOB="00bfd61825210f91fdc12703772cdbb9e35f6f1288943cb564d56d3d051a8640d86e7287216f7f13089ff703b57a720df23e8486d7375c417d008092871326f9e39a04c14e43ab1524686eed805f1498fe2cde71fafe8a3ae5461f65aa45c2fc30da3a28d0e49d30d79978605078417425a828ddb515ba4ecab4ba1714cdd09cb90de7a2c502902c845ed5251aa9459cd9ae419148c9dc6ccd2ca3f29381d3e06d93e6", @ANYRES64=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1991bf6e3f1d0800000000000000000000000400", @ANYRES32, @ANYBLOB="08bbbf140073f2caa45dffd0ee5e4795aeb8a99063fba3b8eb7ed6b2223eff547b9aed99f5ae4ede7d049a84192cb450eb1536943f50532a4369b93c635afe28eb902c6989630558deaddb8b3d09ec417bc785bd7c3cb6b074a129e856a28a6c8294c5ea4689f342181738c795c66cc21d3324754509ed360532bb0242f95b6f4700347f4c89ca343014b810f781566c40c5be28040000000ecff15117bc42e0f796dde051a6027d94b3bedea06f1b474aaa60ee23f509bf4b7b2da85ff2ea346b7b620c96c83c3365", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES16=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0001000000010000000000000000000000000000a6817dfd616ade7311400fe3550ce9b0cb0e3788183f4d5bdc752479f783714519438daf76e210f475ab5e3ee0cc8b8098722ee035d8e917d2b0b18b217127b72190f61e7b3ba3", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRESHEX=r0], 0xa8, 0x4000}}], 0x1, 0x4000800) r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x40, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000005c0), 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000840)=""/101, 0x65}], 0x2}, 0x2060) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getsockopt(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r8 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="646d61736b3d303030da797408df9dfd611d44d29a30303030303030303030303030303030303030342c666d61736b3d30303030303030303030303030303030303030303030302c646973636172642c7569643dd9d667498e099419bd6fca8e96c296a2932c5691d6fef460ef17c587a6bb05dfdc40ce9bcd2ca64c511fcb61d566b7feea259e0ad379b4dcb0abdae7b9d10888b69a80894ebae7540a2e4390901fa1e645b60444eba1602decc0f80fcad7b3535af4df81b32f15ab225ebc5fef008ad60fa738d19631b7f9723872b7d32408a59b5a48a4b131d27e392008d7", @ANYRESHEX=r6, @ANYBLOB=',dmask=00000000000000000000153,iocharset=iso8859-1,gid=', @ANYRESHEX=r7, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB=',discard,\x00'], 0x81, 0x14f5, &(0x7f0000001580)="$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") sendmmsg$unix(r2, &(0x7f0000000c40)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xc8, 0x30000000}}, {{&(0x7f0000000ac0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000b40)="83be1b77ad8588dd7b8f737b8e2a1eae1ed6fbdc335211dfb9b0e0ab959b15abb4e47a8d946a9f230570", 0x2a}], 0x1, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r4, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r8]}}], 0x58, 0x400}}], 0x2, 0x4000) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000040)={0x0, 0x200003f000000, 0x20000000}) (fail_nth: 2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r10 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000680)="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", 0x1a0, 0x44004, &(0x7f0000000280)={0xa, 0x4c23, 0x10000, @loopback, 0x99}, 0x1c) 00:12:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}, 0x1, 0x300000000000000}, 0x0) 00:12:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xfcffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r12, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) [ 767.481262][T11091] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 768.195072][T11090] FAULT_INJECTION: forcing a failure. [ 768.195072][T11090] name failslab, interval 1, probability 0, space 0, times 0 [ 768.197942][T11090] CPU: 1 PID: 11090 Comm: syz-executor.1 Tainted: G W 6.1.70-syzkaller #0 [ 768.200294][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 00:12:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x141842, 0x0) (rerun: 32) write(r3, &(0x7f0000004200)='t', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7f}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048804}, 0x40040d3) [ 768.202512][T11090] Call trace: [ 768.203306][T11090] dump_backtrace+0x1c8/0x1f4 [ 768.204357][T11090] show_stack+0x2c/0x3c [ 768.205320][T11090] dump_stack_lvl+0x108/0x170 [ 768.206403][T11090] dump_stack+0x1c/0x58 [ 768.207397][T11090] should_fail_ex+0x3c0/0x51c [ 768.208519][T11090] __should_failslab+0xc8/0x128 00:12:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid, 0x6, 0x600) [ 768.209652][T11090] should_failslab+0x10/0x28 [ 768.210676][T11090] __kmem_cache_alloc_node+0x80/0x388 [ 768.212105][T11090] __kmalloc+0xc4/0x1c4 00:12:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_DURATION={0x8}]}, 0x2c}}, 0x4) [ 768.213002][T11090] tomoyo_encode+0x270/0x4b0 [ 768.214099][T11090] tomoyo_realpath_from_path+0x478/0x4cc [ 768.215407][T11090] tomoyo_path_number_perm+0x1dc/0x688 [ 768.216645][T11090] tomoyo_file_ioctl+0x2c/0x3c [ 768.217815][T11090] security_file_ioctl+0x80/0xbc [ 768.218986][T11090] __arm64_sys_ioctl+0xa8/0x1c8 [ 768.220054][T11090] invoke_syscall+0x98/0x2c0 [ 768.221134][T11090] el0_svc_common+0x138/0x258 [ 768.222229][T11090] do_el0_svc+0x64/0x218 [ 768.223389][T11090] el0_svc+0x58/0x168 [ 768.224318][T11090] el0t_64_sync_handler+0x84/0xf0 [ 768.225512][T11090] el0t_64_sync+0x18c/0x190 [ 768.226843][T11090] ERROR: Out of memory at tomoyo_realpath_from_path. [ 768.261964][T11096] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.3'. [ 768.265697][T11092] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 768.297358][T11106] netlink: 868 bytes leftover after parsing attributes in process `syz-executor.2'. 00:12:48 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x2b) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x6611, 0x0) sendmmsg$unix(r2, &(0x7f0000000380)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a00), 0x0, &(0x7f0000002a80)=ANY=[@ANYRES64=r2, @ANYRES16=r3, @ANYBLOB="0dd78ae9522abada051e5280a6c492d392b483252d38b1510677c21de2791eedbac9ec9aacc070da64f8017f6d1f4e4e52f0f0e72a14d8a6b49bfa3206b8ce3838b05efca43d2f43f00bbfada9e8f7033f1651241e62b4b730503ebb27f24c9897b982fe024d235e8440b1f53bc8a8af74b6202ebd62371792acc51495abf78e98317f66a44d1140aeb14ed54412d01594b9323896dd57f13534d5b0683e7b", @ANYRES32, @ANYRES32, @ANYBLOB="00bfd61825210f91fdc12703772cdbb9e35f6f1288943cb564d56d3d051a8640d86e7287216f7f13089ff703b57a720df23e8486d7375c417d008092871326f9e39a04c14e43ab1524686eed805f1498fe2cde71fafe8a3ae5461f65aa45c2fc30da3a28d0e49d30d79978605078417425a828ddb515ba4ecab4ba1714cdd09cb90de7a2c502902c845ed5251aa9459cd9ae419148c9dc6ccd2ca3f29381d3e06d93e6", @ANYRES64=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="1991bf6e3f1d0800000000000000000000000400", @ANYRES32, @ANYBLOB="08bbbf140073f2caa45dffd0ee5e4795aeb8a99063fba3b8eb7ed6b2223eff547b9aed99f5ae4ede7d049a84192cb450eb1536943f50532a4369b93c635afe28eb902c6989630558deaddb8b3d09ec417bc785bd7c3cb6b074a129e856a28a6c8294c5ea4689f342181738c795c66cc21d3324754509ed360532bb0242f95b6f4700347f4c89ca343014b810f781566c40c5be28040000000ecff15117bc42e0f796dde051a6027d94b3bedea06f1b474aaa60ee23f509bf4b7b2da85ff2ea346b7b620c96c83c3365", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES16=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0001000000010000000000000000000000000000a6817dfd616ade7311400fe3550ce9b0cb0e3788183f4d5bdc752479f783714519438daf76e210f475ab5e3ee0cc8b8098722ee035d8e917d2b0b18b217127b72190f61e7b3ba3", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRESHEX=r0], 0xa8, 0x4000}}], 0x1, 0x4000800) r4 = syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x40, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000005c0), 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000840)=""/101, 0x65}], 0x2}, 0x2060) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) getsockopt(0xffffffffffffffff, 0xff, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r8 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000cc0)=ANY=[@ANYBLOB="646d61736b3d303030da797408df9dfd611d44d29a30303030303030303030303030303030303030342c666d61736b3d30303030303030303030303030303030303030303030302c646973636172642c7569643dd9d667498e099419bd6fca8e96c296a2932c5691d6fef460ef17c587a6bb05dfdc40ce9bcd2ca64c511fcb61d566b7feea259e0ad379b4dcb0abdae7b9d10888b69a80894ebae7540a2e4390901fa1e645b60444eba1602decc0f80fcad7b3535af4df81b32f15ab225ebc5fef008ad60fa738d19631b7f9723872b7d32408a59b5a48a4b131d27e392008d7", @ANYRESHEX=r6, @ANYBLOB=',dmask=00000000000000000000153,iocharset=iso8859-1,gid=', @ANYRESHEX=r7, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB=',discard,\x00'], 0x81, 0x14f5, &(0x7f0000001580)="$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") sendmmsg$unix(r2, &(0x7f0000000c40)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xc8, 0x30000000}}, {{&(0x7f0000000ac0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000000b80)=[{&(0x7f0000000b40)="83be1b77ad8588dd7b8f737b8e2a1eae1ed6fbdc335211dfb9b0e0ab959b15abb4e47a8d946a9f230570", 0x2a}], 0x1, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r4, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r8]}}], 0x58, 0x400}}], 0x2, 0x4000) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000040)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000000040)={0x0, 0x200003f000000, 0x20000000}) (fail_nth: 3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r10 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000680)="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", 0x1a0, 0x44004, &(0x7f0000000280)={0xa, 0x4c23, 0x10000, @loopback, 0x99}, 0x1c) 00:12:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028050000fcdbdf258283000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c0005003901"], 0x398}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r5, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x0, 0x44}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0xffffff7f, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r1