x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r3, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:00 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) 10:49:01 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) 10:49:01 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:01 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) 10:49:01 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) 10:49:02 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:02 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r3, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r3, @ANYBLOB="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"], 0x4f0}}, 0x4841) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r8, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001680)={r7, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:02 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:02 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:02 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:03 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:03 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:03 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:04 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:04 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:04 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:05 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:05 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:05 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:05 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:05 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:05 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:06 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:06 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:06 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:06 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:06 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:06 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:07 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:07 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:07 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:07 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:07 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:07 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:07 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce429"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:08 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:08 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce429"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:08 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce429"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:08 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5c"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:09 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:09 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:09 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:09 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5c"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:09 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:09 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x2008048) 10:49:09 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5c"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:09 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x2008048) 10:49:09 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:10 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x2008048) 10:49:10 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:10 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:10 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:10 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x84) 10:49:10 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:10 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 10:49:10 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x84) 10:49:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:10 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:10 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) 10:49:10 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 10:49:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:11 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:11 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 10:49:11 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:11 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:11 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 10:49:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:11 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:12 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 10:49:12 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:12 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:12 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:12 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:12 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:13 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:13 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:13 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:13 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:13 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:13 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:13 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:14 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:14 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:14 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:14 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:14 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:14 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:14 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:14 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:15 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:15 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:15 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:15 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:15 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:15 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:16 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:16 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:16 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:16 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:16 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:16 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:16 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:16 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:16 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:17 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:17 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:17 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:17 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:17 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:17 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:17 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:17 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:17 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:17 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:17 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:18 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:18 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:18 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:18 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:18 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:18 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:18 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:18 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:18 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x2008048) 10:49:18 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x84) 10:49:19 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:19 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5c"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:19 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x2008048) 10:49:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:19 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x84) 10:49:19 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:19 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:19 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x84) 10:49:19 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x2008048) 10:49:19 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:19 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:19 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:19 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x84) 10:49:19 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:19 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:19 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:19 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:19 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:19 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:20 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:20 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:20 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:20 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:20 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:20 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:20 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:21 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:21 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:21 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:21 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:21 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:21 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:21 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x84) 10:49:21 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:22 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:22 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:22 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:22 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:22 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:22 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) 10:49:22 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:22 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:22 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:22 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) 10:49:22 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:22 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:22 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) 10:49:22 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:22 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r5, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001680)={r4, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:22 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) [ 1788.732163][T18164] list_add corruption. prev->next should be next (ffff88807d0e5000), but was ffff88802b50c000. (prev=ffffffff8ead60a0). [ 1788.751044][T18164] ------------[ cut here ]------------ [ 1788.757483][T18164] kernel BUG at lib/list_debug.c:32! [ 1788.769816][T18164] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1788.775970][T18164] CPU: 1 PID: 18164 Comm: syz-executor.0 Not tainted 6.6.0-rc1-syzkaller-00115-g9fdfb15a3dbf #0 [ 1788.786449][T18164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 1788.796641][T18164] RIP: 0010:__list_add_valid_or_report+0xb6/0x100 [ 1788.803148][T18164] Code: e8 8f 3d 3f fd 0f 0b 48 89 d9 48 c7 c7 20 09 e9 8a e8 7e 3d 3f fd 0f 0b 48 89 f1 48 c7 c7 a0 09 e9 8a 48 89 de e8 6a 3d 3f fd <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 20 0a e9 8a e8 53 3d 3f [ 1788.822813][T18164] RSP: 0018:ffffc90014eaf820 EFLAGS: 00010286 10:49:22 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:22 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) [ 1788.828932][T18164] RAX: 0000000000000075 RBX: ffff88807d0e5000 RCX: ffffc90003959000 [ 1788.836950][T18164] RDX: 0000000000000000 RSI: ffffffff816a87f2 RDI: 0000000000000005 [ 1788.844963][T18164] RBP: ffff88807a2d2000 R08: 0000000000000005 R09: 0000000000000000 [ 1788.853233][T18164] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88807a2d2008 [ 1788.861251][T18164] R13: ffff88807d0e5000 R14: ffff8880554d50f0 R15: ffff8880554d5140 [ 1788.869254][T18164] FS: 00007f7b262416c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1788.878216][T18164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1788.884824][T18164] CR2: 000000c00b35c000 CR3: 000000007dcfb000 CR4: 00000000003506e0 [ 1788.892832][T18164] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1788.900822][T18164] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1788.908814][T18164] Call Trace: [ 1788.912108][T18164] [ 1788.915055][T18164] ? show_regs+0x8f/0xa0 [ 1788.919358][T18164] ? die+0x36/0xa0 [ 1788.923126][T18164] ? do_trap+0x22b/0x420 [ 1788.927416][T18164] ? __list_add_valid_or_report+0xb6/0x100 [ 1788.933259][T18164] ? __list_add_valid_or_report+0xb6/0x100 [ 1788.939106][T18164] ? do_error_trap+0xf4/0x230 [ 1788.943815][T18164] ? __list_add_valid_or_report+0xb6/0x100 [ 1788.949666][T18164] ? handle_invalid_op+0x34/0x40 [ 1788.954646][T18164] ? __list_add_valid_or_report+0xb6/0x100 [ 1788.960493][T18164] ? exc_invalid_op+0x2d/0x40 [ 1788.965195][T18164] ? asm_exc_invalid_op+0x1a/0x20 [ 1788.970245][T18164] ? vprintk+0x82/0x90 [ 1788.974434][T18164] ? __list_add_valid_or_report+0xb6/0x100 [ 1788.980281][T18164] nfc_llcp_register_device+0x7a3/0x9d0 [ 1788.985923][T18164] nfc_register_device+0x6d/0x3c0 [ 1788.991011][T18164] nci_register_device+0x7f4/0xb80 [ 1788.996186][T18164] ? nci_init_complete_req+0x410/0x410 [ 1789.001682][T18164] ? lockdep_init_map_type+0x16d/0x7c0 [ 1789.007199][T18164] virtual_ncidev_open+0x147/0x220 [ 1789.012394][T18164] ? virtual_ncidev_read+0x4e0/0x4e0 [ 1789.017720][T18164] misc_open+0x3da/0x4c0 [ 1789.022034][T18164] ? misc_devnode+0x120/0x120 [ 1789.026763][T18164] chrdev_open+0x277/0x700 [ 1789.031204][T18164] ? __unregister_chrdev+0x100/0x100 [ 1789.036508][T18164] ? fsnotify_perm.part.0+0x25d/0x630 [ 1789.041915][T18164] ? fsnotify_perm.part.0+0x268/0x630 [ 1789.047329][T18164] do_dentry_open+0x88b/0x1730 [ 1789.052129][T18164] ? __unregister_chrdev+0x100/0x100 [ 1789.057446][T18164] ? may_open+0x1f2/0x400 [ 1789.061811][T18164] path_openat+0x19af/0x29c0 [ 1789.066442][T18164] ? path_lookupat+0x770/0x770 [ 1789.071247][T18164] do_filp_open+0x1de/0x430 [ 1789.075773][T18164] ? may_open_dev+0xf0/0xf0 [ 1789.080310][T18164] ? expand_files+0x442/0x910 [ 1789.085021][T18164] ? _raw_spin_unlock+0x28/0x40 [ 1789.089960][T18164] ? alloc_fd+0x2da/0x6c0 [ 1789.094316][T18164] do_sys_openat2+0x176/0x1e0 [ 1789.099019][T18164] ? build_open_flags+0x690/0x690 [ 1789.104073][T18164] ? xfd_validate_state+0x5d/0x180 [ 1789.109252][T18164] __x64_sys_openat+0x175/0x210 [ 1789.114137][T18164] ? __ia32_sys_open+0x1e0/0x1e0 [ 1789.119100][T18164] ? rcu_is_watching+0x12/0xb0 [ 1789.123884][T18164] ? trace_irq_enable.constprop.0+0xd0/0x100 [ 1789.129892][T18164] do_syscall_64+0x38/0xb0 [ 1789.134356][T18164] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1789.140540][T18164] RIP: 0033:0x7f7b2547cae9 [ 1789.145060][T18164] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1789.164707][T18164] RSP: 002b:00007f7b262410c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1789.173240][T18164] RAX: ffffffffffffffda RBX: 00007f7b2559bf80 RCX: 00007f7b2547cae9 [ 1789.181235][T18164] RDX: 0000000000000002 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 1789.189221][T18164] RBP: 00007f7b254c847a R08: 0000000000000000 R09: 0000000000000000 [ 1789.197219][T18164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1789.205215][T18164] R13: 000000000000000b R14: 00007f7b2559bf80 R15: 00007ffcb8f2e3d8 [ 1789.213219][T18164] [ 1789.216251][T18164] Modules linked in: [ 1789.289393][T18164] ---[ end trace 0000000000000000 ]--- [ 1789.297952][T18164] RIP: 0010:__list_add_valid_or_report+0xb6/0x100 [ 1789.307342][T18164] Code: e8 8f 3d 3f fd 0f 0b 48 89 d9 48 c7 c7 20 09 e9 8a e8 7e 3d 3f fd 0f 0b 48 89 f1 48 c7 c7 a0 09 e9 8a 48 89 de e8 6a 3d 3f fd <0f> 0b 48 89 f2 48 89 d9 48 89 ee 48 c7 c7 20 0a e9 8a e8 53 3d 3f [ 1789.331164][T18164] RSP: 0018:ffffc90014eaf820 EFLAGS: 00010286 [ 1789.339712][T18164] RAX: 0000000000000075 RBX: ffff88807d0e5000 RCX: ffffc90003959000 [ 1789.348334][T18164] RDX: 0000000000000000 RSI: ffffffff816a87f2 RDI: 0000000000000005 [ 1789.356730][T18164] RBP: ffff88807a2d2000 R08: 0000000000000005 R09: 0000000000000000 [ 1789.366114][T18164] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88807a2d2008 [ 1789.375715][T18164] R13: ffff88807d0e5000 R14: ffff8880554d50f0 R15: ffff8880554d5140 [ 1789.386514][T18164] FS: 00007f7b262416c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1789.395904][T18164] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1789.402753][T18164] CR2: 0000001b2e922000 CR3: 000000007dcfb000 CR4: 00000000003506e0 [ 1789.415792][T18164] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1789.424494][T18164] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1789.432570][T18164] Kernel panic - not syncing: Fatal exception [ 1789.438971][T18164] Kernel Offset: disabled [ 1789.443325][T18164] Rebooting in 86400 seconds..