x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r3, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:00 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) 10:49:01 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) 10:49:01 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:01 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) 10:49:01 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:01 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) 10:49:02 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:02 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, 0x0, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r3, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r3, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r3, @ANYBLOB="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"], 0x4f0}}, 0x4841) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r8, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, &(0x7f0000001680)={r7, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:02 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:02 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:02 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:02 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:03 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:03 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:03 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:03 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:04 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:04 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:04 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:05 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:05 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:05 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:05 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:05 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:05 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:05 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:06 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:06 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:06 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:06 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:06 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 5: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:06 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:07 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:07 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:07 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:07 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:07 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 10:49:07 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8, 0x3, r2}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:07 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce429"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:07 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:08 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:08 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce429"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:08 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce429"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:08 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5c"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:08 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:08 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:09 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:09 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:09 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:09 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5c"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:09 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:09 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x2008048) 10:49:09 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5c"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:09 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x2008048) 10:49:09 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:10 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x40000) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x2008048) 10:49:10 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:10 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:10 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:10 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x84) 10:49:10 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:10 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 10:49:10 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x84) 10:49:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:10 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:10 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:10 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) 10:49:10 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 10:49:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:11 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:11 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 10:49:11 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:11 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:11 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 10:49:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:11 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:11 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:12 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b65"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) 10:49:12 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:12 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:12 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:12 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:12 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:12 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:12 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:13 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:13 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:13 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:13 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:13 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:13 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:13 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:13 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:14 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:14 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:14 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:14 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:14 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:14 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:14 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:14 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:14 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:15 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:15 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:15 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:15 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:15 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:15 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:15 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:16 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:16 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:16 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:16 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:16 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:16 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:16 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:16 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:16 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:16 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:17 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:17 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:17 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:17 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:17 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:17 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:17 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:17 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:17 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:17 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:17 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:17 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:18 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:18 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:18 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:18 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:18 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:18 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:18 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:18 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:18 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x2008048) 10:49:18 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:18 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x84) 10:49:19 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:19 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5c"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:19 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x2008048) 10:49:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000500), 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:19 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x84) 10:49:19 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:19 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:19 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x84) 10:49:19 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x2008048) 10:49:19 executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:19 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:19 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:19 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x84) 10:49:19 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:19 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:19 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:19 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:19 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:19 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:20 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:20 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:20 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, 0x0, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:20 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:20 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:20 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:20 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:21 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:21 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:21 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:21 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:21 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:21 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:21 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:21 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x84) 10:49:21 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:22 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:22 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:22 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:22 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:22 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:22 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) 10:49:22 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:22 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:22 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:22 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) 10:49:22 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(r0, 0x0, 0x8c800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) 10:49:22 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:49:22 executing program 4: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) 10:49:22 executing program 1: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="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"], 0x4f0}}, 0x4841) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r6, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000001680)={r5, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:22 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0xacb3358bd67f8f23) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x107201, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000201}, 0xc, &(0x7f0000000300)={&(0x7f0000000c00)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000ffdbdf25020000001400020076657468305f746f5f626174616476000900010073797a300000000005000400010000000900010073797a320000000005000400020000000900010073797a320000000095548174810d18896eb26a7b51aa720e6a0b433999ec51f40eb034d8d14aa18ce4293eea4d242d12c863946e73ec0c826c8609e8d5e0e3a76f9473a60dbc4e1d7febb9f1879b0813402a2e5d3234d2d20a6846417631948fceedee792d5cc2f78f000a864b8b26f309ee149155988ff68e0e7bf71a035cb6bf333b655f689ba1e0a7d561453bc1a6057890086902cded01d3c2e6a053c95e4f"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8c800) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001300)={&(0x7f00000005c0)={0xec, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "15c2c60d464fd8ae54b252557110ba14553702beb665e0a2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d456fce1028a40bbeec5587e8a81f2d685247d3f96ed16c2"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "51e823a8d1be97ee4a5e08f45066c09bc7ebc8acca5da970"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "20b7127e29ee0a35c8495f08b62083e2a7c7433ed5f3cc07"}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x88c5) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0496b3c000000400000", @ANYRES16=r2, @ANYBLOB="000028bd70000000000039000000ac025a8068000080260002001e4f5056164106502a04185418514303463207092d5100003a445005462a004a4340000014000300ff0300020200ed2a0400ff03e5cb0000140005000800000007007f008ab40000020008000a00010000000600066c000005000700010000004c0000801b000100000918000c12000105004848241602000d061609243002000e000100011b480b006000123012000005000200060000001400050006007d3e07000000090000000500ff0740000380050004000200000014000300000040ea00049c00060081ff0001ff7f05000400000000001700010012480000161230040305160036000c4918003600ac000280070001000c480c001a000100041800240009170f16000b07000612021b16360b090b00000d0001001bd9160030011b04060000003100020020235000400238001d011a183f0400081f30142448210428063d00433819000351001c01500505031f20053305000000140003000000000040d200003f00050002000104050007000000000005000700010000000500040000000000140003000900ff000200620001000400090003003c000080050004000000000014000300fbff02000000020000000000000206000800020008050c191100010000003d000b051b6036001b480b000000280001801c000200422048024b0602062810000e0700184829001610051e054c0500040001000000a4000280140003000000622381000900000c000000010400140005000500ff7f000004004c000004ff03050005000420020000000500060001000000300002000c4011391e323919cc214200361e021e39031507332233202d1506132f002248080b21182e07300450483200050006000200000014000500080051180900050001000600080001001400050003008c00060000000600640000000000050007000000000088005a801800008014000500000000f07e350000f500000001802256580000801400050001000600f7ffffff060000ba0000000023000200460100210808212d083801254025304f381b07073c02412303101e1d03303d00050006000000000014000500000000004609000009000500030009001400028005000200300000000500040000000000bc005a800c00028005000600000000006c000080050004000000000014000500bf00fdffff7f000102000004ff00070008000100024812001f00020000401f3038040e4548342f234f4a33142051174924230e36483c28001400010000306c1b0b2816360001136000486c300500070002000000050006000200000040000280050006000000000005000600000000000500040001000000050006000200000005000400020000001400050000047f00ff07000001000800008500200068005a80640001801400050000ff08000002c200050003000002070014000500040001000000ff0f07003f00590d0300140005000100df5d02000010070004000180090005000400000000001400050000000000ff0f03000100a70004000600050006000200000084005a801800028014000300080000000100ff0f000001005f0087002800028005000400010000000b0002000001471e384f500005000700010000000500060002000000400003800500040000000000040002001400050000000400b300ffff050000000000ff01140005000000000000100000000800000500090005000700020000"], 0x4f0}}, 0x4841) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000f00)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r5, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}]]}, 0x30}, 0x1, 0x0, 0x0, 0x410}, 0x2008048) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001680)={r4, "5add4736f69e49105821ec7efbfad964"}) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x50}, @val={0x8}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x84) 10:49:22 executing program 3: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, 0x0}, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0}, 0x0) [ 1788.732163][T18164] list_add corruption. prev->next should be next (ffff88807d0e5000), but was ffff88802b50c000. (prev=ffffffff8ead60a0). [ 1788.751044][T18164] ------------[ cut here ]------------