}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0xe}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x0, 0x0, 0x0, {{0x7}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) [ 1868.364081][T32164] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1868.377358][T32165] netlink: 'syz-executor.4': attribute type 181 has an invalid length. 05:14:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) [ 1868.433692][T32171] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1868.466398][T32173] netlink: 'syz-executor.4': attribute type 181 has an invalid length. [ 1868.468634][T32174] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 05:14:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x0, 0x0, 0x0, {{0x7}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x10}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:22 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x3, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5e}}}}}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 05:14:22 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000900)={0xb34, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1fc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8, 0xfff7, 0x3ff, 0xfff9, 0x0, 0x4, 0x400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x7ff, 0x3, 0x1000, 0x5, 0x7f, 0x40, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x36, 0x5, 0xc, 0x30, 0x4, 0x1b, 0x4, 0x0, 0x18, 0x48, 0xd6, 0xb, 0x3c, 0x48, 0x6, 0x1, 0x24, 0x1, 0x60, 0x1b, 0x18, 0x6c, 0x2, 0x9, 0x3, 0x6, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x3, 0xfff, 0xc550, 0x6, 0x1000, 0x2c21]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x12, 0x9, 0x36, 0x9, 0x6, 0x1, 0x1b, 0x24]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x0, 0x30, 0x9, 0x12]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x79, 0x6, 0x5e06, 0x7fff, 0x1, 0x7, 0x400]}}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x6c, 0x0, 0x1b, 0x2, 0xc, 0x4, 0xb, 0x16, 0x5, 0x24, 0x12, 0x24, 0x2, 0x1, 0x11, 0x48, 0x16, 0x36, 0x1, 0x6c, 0xc, 0xb, 0xb, 0x6c, 0x5, 0x24, 0x36, 0x48]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x21, 0xb, 0x6c, 0x48, 0x18]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x24, 0xb, 0x17, 0x4, 0x18, 0x30, 0x6c, 0xb33fe9fea13adf4b, 0x12, 0x9, 0x30, 0x2, 0xc, 0x7e, 0x6c]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x4}, {0x2, 0x1}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x8}, {0x4, 0x8}, {0x7, 0x6}, {0x6, 0x3}, {0x3, 0x6}, {0x5, 0x8}, {0x6, 0x1}, {0x4, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x3}, {0x1, 0xa}, {0x2, 0x1}, {0x0, 0x7}, {0x1}, {0x1, 0x7}, {0x6, 0x1}, {}, {0x0, 0x5}, {0x1, 0xa}, {0x4}, {0x5, 0xa}, {0x3, 0x7}, {0x1, 0x2}, {0x6, 0x1}, {0x3}, {0x5, 0x4}, {0x4, 0x7}, {0x0, 0x7}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x4}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0x6}, {0x3, 0x8}, {0x6, 0x1}, {0x3}, {0x3, 0x2}, {0x0, 0x1}, {0x7, 0x8}, {0x0, 0x8}, {0x4, 0x6}, {0x5, 0x9}, {0x6, 0x5}, {0x6}, {0x2, 0x2}, {0x3, 0x9}, {}, {0x2, 0x3}, {0x0, 0x3}, {0x1, 0x3}, {0x0, 0x6}, {0x4, 0xa}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x8}, {0x3, 0x9}, {0x7, 0x8}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x77, 0x4817, 0x95, 0x2, 0x4, 0x4]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xb, 0x18, 0x24, 0x24, 0x60, 0x9, 0x1b, 0x6, 0xc, 0x6, 0x1, 0x1, 0x3, 0x30, 0xc, 0x30, 0x5, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc1c5, 0xfff8, 0x3, 0x4, 0x8000, 0x6, 0x3, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x8, 0xffff, 0x3ff, 0x3f, 0x36e, 0x3]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0xb, 0x4, 0x1, 0x2, 0x1, 0x6a, 0x16, 0x1, 0x6c]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x48, 0xc, 0x48, 0x60, 0x6c, 0x6c, 0x12, 0x1b, 0xb, 0x36, 0x36, 0x1, 0x1, 0x9, 0x1b, 0x60, 0x3a, 0x5, 0x30, 0x36, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x4, 0x1, 0x2, 0x8, 0x20, 0xf000, 0x2]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xdc00, 0xd9, 0x40, 0x5, 0xb6, 0x2, 0x401, 0x1]}}]}]}, @NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5a, 0x800, 0x4, 0x81, 0x6, 0x3ff, 0xfff, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8001, 0x7ff, 0x0, 0x8, 0x5, 0xa85, 0x1000]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5fa2, 0xe16, 0xc87a, 0x3f, 0x3, 0xa95a, 0x3ff, 0x3466]}}]}, @NL80211_BAND_2GHZ={0x18c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x2, 0x30, 0x5, 0x1b, 0x48, 0x48, 0xb, 0x3, 0x18, 0x5, 0x3, 0x9, 0x75, 0x9, 0x12, 0x9, 0xc, 0xb, 0x36, 0x0, 0x2]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x3, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x8}, {0x2, 0x1}, {0x6, 0x2}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x5}, {0x7, 0x2}, {0x7, 0x6}, {0x5, 0x7}, {0x4, 0x3}, {0x7, 0x3}, {0x4, 0x7}, {0x3, 0x4}, {0x2, 0x3}, {0x2, 0x9}, {0x0, 0x7}, {0x4, 0xa}, {0x0, 0x2}, {0x7, 0x5}, {0x6, 0x7}, {0x3, 0x2}, {0x4, 0x5}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x1}, {0x4, 0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x9}, {0x7}, {0x4, 0x4}, {0x0, 0x4}, {}, {0x0, 0x3}, {0x3, 0xa}, {0x0, 0x2}, {0x1}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0x7}, {0x3, 0x9}, {0x0, 0x8}, {0x5, 0x1}, {0x7}, {0x2}, {0x1, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0xa}, {0x3, 0x9}, {0x2, 0x2}, {0x5, 0x3}, {0x1, 0x7}, {}, {}, {0x1, 0x1}, {0x4, 0x9}, {0x5, 0x8}, {0x7, 0x4}, {0x2, 0x4}, {0x0, 0x3}, {0x1, 0x2}, {0x3, 0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x3, 0x4}, {0x3, 0x3}, {0x7, 0x6}, {0x7}, {0x3, 0x8}, {0x1, 0xa}, {0x2}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x7}, {0x4, 0x3}, {0x6, 0x6}, {0x6, 0x7}, {0x1}, {0x0, 0x1}, {0x4, 0xa}, {0x7, 0x1}, {0x5, 0x3}, {0x4, 0x5}, {0x2, 0x7}, {0x1, 0x2}, {0x0, 0x4}, {0x2}, {0x5}, {0x4}, {0x4, 0x6}, {0x6, 0x8}, {0x1, 0x4}, {0x0, 0xa}, {0x5, 0x9}, {0x2, 0x1}, {0x6, 0x2}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x6, 0x3}, {0x5, 0x3}, {0x3, 0x2}, {0x0, 0x2}, {0x5, 0x2}, {0x0, 0x7}, {0x1, 0x5}, {0x5, 0x2}, {}, {0x1, 0x2}, {0x7, 0x1}, {0x3, 0x4}, {0x6, 0x2}, {0x4, 0x2}, {0x5}, {0x6, 0x2}, {0x0, 0x6}, {0x7, 0x1}, {0x5, 0xa}, {0x3, 0x8}, {0x4, 0x4}, {0x6, 0x9}, {0x7, 0x4}, {0x5, 0x5}, {0x2, 0x4}, {0x2, 0x3}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x2}, {0x3, 0x9}, {0x4, 0x7}, {0x1, 0x4}, {0x3, 0x7}, {0x0, 0x2}, {0x3, 0x3}, {0x2, 0x4}, {0x7, 0x1}, {0x2, 0x9}, {0x3, 0x5}, {0x1, 0x5}, {0x2, 0x7}, {0x3, 0x6}, {0x4, 0x3}, {0x2, 0x3}, {0x1, 0x9}, {0x4, 0x3}, {}, {0x6}, {0x3, 0x3}, {0x5, 0x5}, {0x4, 0x6}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0x7}, {0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x6, 0x6}, {0x0, 0x2}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x7, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x5, 0xa}, {0x3, 0x2}, {0x0, 0x2}, {0x4, 0x9}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x7, 0x5}, {0x6, 0x1}, {0x3, 0x4}, {0x2, 0x9}, {0x0, 0x4}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x1}, {0x7, 0x6}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x4}, {0x2, 0x7}, {0x7, 0x2}, {0x2, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0x8}, {0x4, 0x5}, {0x2, 0x5}, {0x2, 0x5}, {0x1, 0x4}, {0x5, 0x7}, {0x3, 0x6}, {0x1, 0x7}, {0x6, 0x9}, {0x6, 0x2}, {0x1, 0xa}, {0x7, 0x2}, {0x4, 0x8}, {0x6, 0x5}, {0x7, 0x6}, {0x4}, {0x2, 0x6}, {0x3, 0xa}, {0x3, 0xa}, {0x4, 0x4}, {0x2, 0x2}, {0x6, 0xa}, {0x7, 0x9}, {0x3, 0x6}, {0x5, 0x2}, {0x0, 0x8}, {0x7, 0x4}, {0x2, 0xa}, {0x7, 0x8}, {0x6, 0x4}, {0x7, 0x2}, {0x7, 0x3}, {0x2, 0x9}, {0x2, 0x6}, {0x3, 0x8}, {0x0, 0x3}, {0x4, 0x8}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x5}, {0x7, 0x8}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x5, 0x3}, {0x1, 0xa}, {0x5, 0x3}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x8}, {0x0, 0x9}, {0x2, 0x3}, {0x5, 0x1}, {0x3, 0x3}, {0x5, 0x2}, {0x3, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x1, 0x8}, {0x3, 0x6}, {0x1, 0x8}, {0x1, 0x8}, {0x7, 0x9}, {0x7, 0x9}, {0x1, 0x3}, {0x3, 0x9}, {0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x6, 0x6}, {0x2, 0xa}, {0x2, 0x3}, {0x1, 0x6}, {0x2, 0x7}, {0x5}, {0x0, 0x7}, {0x7, 0x5}, {0x2, 0x3}, {0x5, 0x5}, {0x6, 0x5}, {0x0, 0x3}, {0x5, 0x5}, {0x4}, {0x6, 0xa}, {0x5, 0x5}, {0x4, 0x3}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x4}, {0x2, 0x7}, {0x1, 0xa}, {0x5, 0x6}, {0x1, 0x6}, {0x7, 0x1}, {0x3, 0x6}, {0x4}, {0x6, 0x4}, {0x2, 0x5}, {0x5, 0x4}, {0x4, 0x2}, {0x3}, {0x0, 0x4}, {0x5, 0x4}, {0x4, 0x2}, {0x0, 0x5}, {0x4, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x53c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x104, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6e8, 0x100, 0x3f, 0x8, 0x8, 0x5, 0x9, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0xf13d, 0x4, 0x9, 0x3f, 0x1ff, 0x5]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7, 0xa257, 0x2, 0xb2, 0xf5b, 0x7, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0xb, 0x6, 0x1, 0x24, 0x6, 0x6, 0x1b, 0x63, 0x12, 0x36, 0x36, 0x9]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x3, 0x8}, {0x1, 0x3}, {0x5, 0x1}, {0x7, 0x6}, {0x6, 0x8}, {0x2, 0x5}, {0x7, 0xa}, {0x1, 0x8}, {0x4, 0x3}, {0x5, 0x9}, {0x4}, {0x3, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {}, {0x0, 0xa}, {0x2, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x7, 0x2}, {0x6, 0x1}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x2, 0x2}, {0x2, 0x6}, {0x4, 0x7}, {0x3, 0x9}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x2, 0x8}, {0x1, 0x9}, {0x2, 0xa}, {0x7, 0xa}, {0x5, 0x5}, {0x4, 0x9}, {0x7, 0x1}, {0x6, 0x3}, {0x3}, {0x7, 0xa}, {0x1, 0x3}, {0x1, 0x1}, {0x6, 0x2}, {0x6, 0x9}, {0x7, 0xa}, {0x5, 0x8}, {0x1, 0x3}, {0x7, 0x1}, {0x2, 0x4}, {0x7, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x9}, {0x1, 0x4}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x1, 0x8}, {0x7, 0x9}, {}, {0x0, 0x7}, {0x1, 0x4}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0xa}, {0x1, 0x8}, {0x2, 0x6}, {0x6, 0x8}, {0x3, 0x1}, {0x4, 0x8}, {0x4, 0x1}, {0x1, 0x4}, {0x4, 0x9}, {0x2, 0x9}, {0x5, 0x2}, {0x0, 0x9}, {0x7, 0x7}, {0x1, 0x2}, {0x3, 0x19}, {0x0, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x2, 0x8}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x5}, {0x4, 0x3}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x18}, {0x0, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x6}, {0x4}, {0x1}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0x9}, {0x5, 0x6}, {0x0, 0x1}, {0x6}, {0x6, 0x4}, {0x2, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x6}, {0x2, 0xa}, {0x6, 0x1}, {0x2, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x0, 0x4}, {0x3, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x1, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x1}, {0x3, 0x2}, {0x0, 0x3}, {0x1, 0x4}, {0x6, 0x2}, {0x3, 0x9}, {0x0, 0x5}, {0x7, 0x8}, {0x6, 0x9}, {0x5, 0x2}, {0x5}, {0x4, 0x9}, {0x5, 0xa}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x2, 0x3}, {}, {0x2, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0xa}, {0x5, 0x9}, {0x6, 0x5}, {0x5, 0x1}, {0x0, 0x9}, {0x7, 0x9}, {0x6, 0xa}, {0x0, 0x4}, {0x5, 0x2}, {0x3}, {0x6, 0x9}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0x7}, {0x1, 0x3}, {0x5, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x0, 0x7}, {0x0, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x5, 0x4}, {0x7, 0x1}, {0x7, 0x5}, {0x0, 0xa}, {0x7, 0x8}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x18, 0x6, 0x6c, 0x76, 0x18, 0x6, 0x24, 0x60, 0x9, 0x36, 0xb, 0x5c6ff865c4091900, 0x1, 0x60, 0x24, 0x36, 0x9, 0xc, 0x2, 0x12, 0xc, 0x18, 0x88, 0x9, 0x69]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x60, 0x16, 0x36, 0x6c, 0xc, 0x6c, 0x5, 0x30, 0x2, 0x9, 0x24, 0x3, 0x48, 0x18, 0x5, 0x3, 0x30, 0x16, 0x36, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x800, 0x0, 0x9, 0x4518, 0x3ff, 0x33d5, 0x100]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0xa}, {0x3, 0x2}, {0x3}, {0x6, 0x4}, {0x1, 0x5}, {0x0, 0x2}, {0x3, 0x3}, {0x3, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x55, 0x6cbd, 0x101, 0x7d, 0x7, 0x2, 0x13, 0x53c6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa9a2, 0x3, 0x2, 0x7fff, 0x7e, 0x3f, 0x3, 0x2]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x3}, {0x5, 0x3}, {0x2, 0x5}, {0x5, 0x9}, {0x6, 0x8}, {0x5, 0x4}, {0x5, 0x8}, {0x1, 0x4}, {0x1, 0x5}, {0x5, 0x4}, {0x2, 0x8}, {0x6, 0x8}, {0x3, 0x8}, {0x7, 0x1}, {0x0, 0x5}, {0x2, 0x2}, {0x2, 0x7}, {0x3, 0x8}, {0x2, 0x3}, {0x2}, {0x7, 0x3}, {0x7, 0x2}, {0x2, 0x3}, {0x4, 0xa}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0x4, 0x24, 0x9, 0x6c, 0x3, 0x9, 0x16, 0x1b, 0x9]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x1, 0x45, 0x12]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x5, 0x5}, {0x7}, {0x7, 0x6}, {0x7, 0xa}, {0x1, 0x3}, {0x7, 0x2}, {}, {0x2, 0x8}, {0x6}, {0x3, 0x3}, {0x7}, {0x0, 0x2}, {0x2, 0x13}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x2}, {0x1, 0x9}, {0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x8, 0x40, 0x3, 0x6, 0xfffc, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x4, 0x4, 0x4, 0xcbc4, 0x8, 0x2bf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x1, 0x1}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x3}, {0x1, 0x5}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x2}, {0x7, 0x2}, {0x0, 0x3}, {0x3, 0x1}, {0x0, 0x8}, {}, {0x4, 0x6}, {0x0, 0x9}, {0x0, 0x7}, {0x4, 0x6}, {0x4, 0x3}]}]}, @NL80211_BAND_6GHZ={0x138, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x2, 0xa}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x9}, {0x7, 0x3}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x3}, {0x3, 0x9}, {0x1}, {0x4}, {0x4, 0x4}, {0x6, 0x1}, {0x2, 0x5}, {0x4, 0x6}, {0x0, 0x1}, {0x3, 0x3}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0x7}, {0x6, 0x5}, {0x1, 0x3}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x3}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x60, 0xc, 0x3, 0x3, 0x28, 0x5, 0x48, 0x16, 0x48, 0x1, 0x12, 0x5, 0x30, 0x12]}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0xa}, {0x2, 0xa}, {0x4, 0x6}, {0x0, 0x3}, {0x3, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x3, 0xa}, {0x2, 0x1}, {0x0, 0x2}, {0x2}, {0x0, 0x2}, {0x5, 0x6}, {0x3, 0x3}, {0x4, 0x3}, {0x4, 0x9}, {0x7, 0x3}, {0x3, 0x7}, {0x1, 0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x6}, {0x5, 0x1}, {0x1}, {0x3, 0x3}, {0x3}, {0x7, 0x9}, {0x6, 0x1}, {0x3, 0xa}, {0x0, 0x4}, {0x4, 0x9}, {0x6, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x3, 0x1}, {0x2, 0x2}, {0x2, 0x4}, {0x7, 0x9}, {0x4, 0x2}, {0x1, 0x2}, {0x4, 0x6}, {0x0, 0xa}, {0x0, 0x8}, {0x6, 0x6}, {0x2, 0x1}, {0x0, 0x9}, {0x4, 0x3}, {0x4, 0xa}, {0x4, 0x3}, {0x5, 0x4}, {0x3}, {0x5, 0x6}, {0x5, 0x1}, {0x7, 0x1}, {0x5, 0x6}, {0x1}, {0x5, 0x6}, {0x5, 0xa}, {0x6, 0x2}, {0x7, 0x3}, {0x7, 0xa}, {0x5, 0x2}, {0x0, 0xa}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x8}, {0x3, 0x8}, {0x4, 0x6}, {0x2, 0x4}, {0x7, 0x8}, {0x5, 0x1}]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x12, 0x16, 0x16, 0x9, 0xc, 0x1e, 0x1, 0x6, 0x36, 0x9, 0x1b, 0xc, 0x36, 0x3a, 0x2, 0x30, 0x9, 0x48, 0xb, 0x48, 0x3, 0x1b, 0x3, 0xc, 0x48, 0x33, 0x1b, 0x30, 0x3, 0xc, 0x9]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x5}, {0x5, 0x2}, {0x1, 0x1}, {0x4, 0x4}, {0x2, 0x8}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x3, 0x9}, {0x0, 0x8}, {0x5, 0x1}, {0x7, 0x9}, {0x2, 0x3}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x3}, {0x4, 0x3}, {0x0, 0x3}, {0x7, 0x3}, {0x7, 0x8}, {0x0, 0x1}, {0x7}, {0x5, 0x4}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x4, 0x1}, {0x6, 0x8}, {0x1, 0x3}, {0x2, 0x2}, {0x6, 0x6}, {0x2, 0x5}, {0x2, 0xa}, {0x0, 0x5}, {0x1, 0x6}, {0x6, 0xa}, {0x6, 0x4}, {0x4, 0x4}, {0x4, 0x4}, {0x1, 0x7}, {0x4, 0xa}, {0x0, 0x6}, {0x0, 0x5}, {0x1, 0x4}, {}, {0x4, 0x3}, {0x5, 0x6}, {0x7, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {0x7, 0x6}, {0x5}, {0x4, 0xa}, {}, {0x4, 0x8}, {0x5, 0x2}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x2}, {0x4, 0x7}, {0x6, 0x7}, {0x2, 0x2}, {0x0, 0xa}, {0x4, 0x9}, {0x2, 0x5}, {0x2, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0x8}, {0x6, 0x2}, {0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf001, 0x40, 0x2a2, 0xf001, 0x6, 0x6, 0x8, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x5, 0x24, 0x4, 0x24, 0x22, 0x6, 0xb, 0x6c, 0x18, 0x24, 0x9, 0x60, 0x5, 0x4, 0x6, 0xb, 0x60, 0x5, 0x1b, 0x3, 0x48, 0x9, 0x5, 0x4, 0x1b, 0x30, 0x1]}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb3, 0x2, 0x8, 0x6, 0x7, 0x1, 0x30f8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x5, 0x48, 0x12, 0x5a]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x7}, {0x1, 0x7}, {0x0, 0x5}, {0x6}, {0x1, 0x8}, {0x6, 0x1}, {0x5, 0x7}, {0x0, 0x4}, {0x3, 0x9}, {0x1, 0x4}, {0x6, 0x7}, {0x1, 0x4}, {0x0, 0x5}, {0x3, 0x7}, {0x7, 0x9}, {0x5, 0x8}, {0x1, 0x8}, {0x3}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x3}, {0x5, 0x9}, {0x4, 0x3}, {0x2, 0xa}, {0x7, 0x5}, {0x2}, {0x5, 0x7}, {0x5, 0x7}, {0x3, 0x6}, {0x0, 0x5}, {0x5, 0x9}, {}, {0x3, 0x5}, {0x7, 0xa}, {0x6, 0x5}, {0x5, 0x5}, {0x5, 0x8}, {0x4, 0x2}, {0x4}, {0x1, 0x8}, {0x3, 0x6}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x0, 0x6}, {0x3, 0x4}, {0x7, 0x9}, {0x5}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x3}, {0x1, 0x5}, {0x6, 0x1}, {}, {0x0, 0xa}, {0x2, 0x2}, {0x4, 0x4}, {0x3, 0x3}, {0x3, 0xa}, {0x5, 0x8}, {0x7, 0xa}, {0x7, 0x6}, {0x3, 0x4}, {0x5, 0x5}, {0x4}, {0x3, 0xa}, {0x0, 0x9}, {0x7, 0x5}, {0x3, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x0, 0x5}, {0x2, 0x2}, {0x1, 0x2}, {0x5, 0x5}, {0x6}, {0x6, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x2, 0x1}, {0x1, 0x9}, {0x6, 0xa}, {0x1, 0x9}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x3}, {0x3, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1b, 0x18, 0xb, 0x18, 0x2, 0x6, 0xb, 0xc, 0xb, 0x18, 0x1, 0x25, 0x30, 0xc, 0x48]}]}, @NL80211_BAND_60GHZ={0xd4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x12, 0x48, 0xb, 0xc, 0x36, 0x24, 0x3, 0x6c, 0x9, 0x4, 0xb, 0x12, 0x18, 0x6c, 0x1b, 0x5, 0xb, 0x30, 0x18, 0x9, 0x72, 0x48, 0x1, 0x4, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x2, 0x2, 0x5, 0x7, 0x0, 0xe82c]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0x3f, 0x7, 0x3, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x8}, {0x5, 0x4}, {0x0, 0x7}, {0x7, 0x6}, {0x4, 0x8}, {0x6, 0x9}, {0x2, 0x9}, {0x6, 0x8}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x2}, {0x1, 0x3}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0x3}, {0x5, 0x8}, {0x7, 0x5}, {}, {0x4, 0x9}, {0x6, 0x9}, {0x6, 0x6}, {0x6, 0x9}, {0x5, 0x6}, {0x1, 0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x3, 0x5}, {0x7, 0xa}, {0x6}, {0x4, 0x6}, {0x4, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x3, 0x5}, {0x7, 0x7}, {}, {0x7, 0x9}, {0x2, 0x5}, {0x2, 0x8}, {0x1, 0xa}, {0x6, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0xa}, {0x3, 0x2}, {0x1}]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x3, 0x2}, {0x3, 0x7}, {0x7, 0x2}, {0x4, 0x8}, {0x3, 0x7}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x7}, {0x6, 0x4}, {0x6, 0x8}, {0x7, 0x2}, {0x3, 0x4}, {0x3, 0x8}, {0x3, 0x2}, {0x6, 0x7}, {0x3, 0x6}, {0x7, 0x2}, {0x4, 0x3}, {0x1, 0x3}, {0x0, 0x3}, {0x0, 0x3}, {0x6, 0x1}, {0x5, 0x2}, {0x4}, {0x2, 0x6}, {0x1, 0x9}, {0x3, 0x7}, {0x5, 0x8}, {0x4, 0x4}, {0x2, 0xa}, {0x4, 0x6}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x6}, {0x3, 0x2}, {0x1, 0x6}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0x5, 0x5}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0xa}, {}, {0x4, 0x3}, {0x0, 0xa}, {0x7, 0x5}, {0x1, 0x6}, {0x6, 0xa}, {0x6, 0x8}, {0x4, 0x8}, {0x2, 0xa}, {0x1, 0x1}, {0x7, 0x2}, {0x3, 0x5}, {0x2}, {0x5, 0x6}, {0x0, 0x4}, {0x4, 0x4}, {0x3, 0x6}]}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1b, 0x60, 0x5b, 0x3, 0x24, 0x2, 0x1, 0x24, 0x9, 0x60, 0x6, 0x6c, 0x16, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfff, 0x8d50, 0x3f, 0x100, 0x100, 0xfff8, 0x1000]}}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x0, 0x9, 0x3a29, 0x20, 0x0, 0x4]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0xdc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x36, 0x9, 0x30, 0x1b, 0x48, 0xb, 0x6f, 0x1b, 0x12, 0x12, 0x4, 0x60, 0x3, 0x18, 0x24, 0x2, 0x1, 0x6c, 0x60, 0x12, 0x30, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x3, 0xb, 0x24, 0x4, 0x12, 0x16, 0x75, 0x60, 0x2, 0x35, 0x6, 0x18, 0x2, 0x30, 0xb, 0x60, 0x18, 0x60, 0x3, 0x39, 0x6c, 0x24, 0x48, 0x24]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x7}, {0x0, 0x2}, {0x0, 0x2}, {0x4, 0xa}, {0x3, 0xa}, {0x4}, {0x0, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x2}, {0x6, 0x9}, {0x1, 0x3}, {0x2, 0x8}, {0x3, 0x4}, {0x7, 0x2}, {0x4, 0x5}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x6, 0x8}, {0x1, 0x5}, {0x0, 0x5}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x4, 0x9}, {0x4, 0x4}, {0x7, 0x6}, {0x6, 0x7}, {0x1, 0x5}, {0x1, 0xa}, {}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x7}, {0x1, 0x3}, {0x7, 0x1}, {0x0, 0x6}, {0x5, 0x5}, {0x4, 0x4}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x4}, {0x4, 0x3}, {0x5, 0x7}, {0x0, 0x4}, {0x4}, {0x4, 0x9}, {0x3, 0x7}, {0x5, 0x7}, {0x6, 0x8}, {0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x8}, {0x7, 0x8}, {0x0, 0x4}, {0x2, 0x2}, {0x7, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x6, 0x9}, {0x2, 0x7}, {0x4}, {0x5, 0x9}, {0x2, 0x6}, {0x4}, {0x3, 0x2}, {0x1, 0xa}, {0x0, 0x9}, {0x2, 0x3}, {0x1, 0x6}, {0x6, 0x2}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x3}, {0x7, 0xa}, {0x0, 0x1}, {0x2, 0xa}, {0x6, 0x3}, {0x5, 0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x6, 0x8}, {0x6, 0x2}, {0x1, 0x7}, {0x0, 0x3}, {0x3, 0x1}, {0x3, 0x4}, {0x1, 0xa}, {0x1, 0x2}, {0x7, 0x2}, {0x5, 0x2}, {0x0, 0x4}, {0x7, 0x2}, {0x4, 0x1}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x5}, {0x5, 0x5}, {0x2, 0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x6}, {0x5, 0xa}, {0x7, 0x1}, {0x1, 0x9}, {0x4, 0x9}, {0x6, 0x8}]}]}]}, @NL80211_ATTR_TX_RATES={0x94, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x3, 0x1, 0x24, 0x7, 0x1b, 0x6c, 0x3, 0x16, 0x36, 0x1, 0x5, 0x30, 0x6, 0x3, 0x9, 0x2, 0x12, 0x9, 0x6c, 0x3, 0xa86d6be739fa7f38, 0xc, 0x12, 0x5, 0x30, 0x2]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x2, 0xa}, {0x7, 0x9}, {0x0, 0x8}, {0x7, 0x6}, {0x3, 0x6}, {0x2, 0x6}, {0x3, 0x5}, {0x1, 0x3}, {0x0, 0x7}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x1, 0x12, 0x12, 0x3, 0x48, 0x36, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xc38, 0x80, 0x4, 0x70, 0x101, 0x8, 0x2]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0xa}, {0x6, 0x3}, {0x3, 0x1}, {0x7, 0x6}, {0x5, 0x3}, {0x1, 0x3}, {0x5, 0x4}, {0x3, 0x8}, {0x6, 0x6}, {0x1, 0xa}, {0x7, 0x7}, {0x2, 0x2}, {0x3, 0x3}, {0x7, 0x9}, {0x5, 0x5}, {0x3, 0x3}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x6}, {0x2, 0x4}, {0x7, 0xa}, {0x6}, {0x5, 0x2}, {0x7, 0x1}, {0x1}, {0x1, 0x6}, {0x4, 0x7}, {0x1, 0x1}, {0x4, 0x9}, {0x7, 0x5}, {0x3, 0x9}, {0x3, 0x3}, {0x1, 0x1}, {0x4}, {0x7, 0x9}, {0x2, 0x8}, {0x5, 0x3}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x3}, {0x1, 0x2}, {0x5, 0x8}, {0x7, 0x6}, {0x4, 0x5}, {0x1, 0x9}]}]}]}]}, 0xb34}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00b5000000000000000000"], 0x28}}, 0x0) 05:14:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) [ 1868.686903][T32186] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{0x7}, {@void, @void}}}, 0x14}}, 0x0) [ 1868.739496][T32190] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1868.745390][T32189] netlink: 'syz-executor.2': attribute type 281 has an invalid length. 05:14:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) [ 1868.817112][T32195] netlink: 'syz-executor.0': attribute type 181 has an invalid length. 05:14:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x11}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3f}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b933a1b4c234fbd5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7fc9ebb91eda2407"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0964d05811f78eb62226658e9a6a08bd"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "613d29a3e7ac453d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x10001}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0) 05:14:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0xf}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) [ 1868.966284][T32205] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1868.998512][T32209] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:14:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r4, 0xac00, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r3, 0x0, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000006c08645219500000f00", @ANYRES32=r5, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf251300000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff0100005b00000006001401d257000005007400060000000a00bd003f002f000700000008001400", @ANYRES32=r6, @ANYBLOB="0600ed006d030000aafaafc8a50598e2f2bbdb6b0f8ed9bba10a7f6fb5b160fd389977ff116259dc1d9e5b7e004d7c028dc162e0dca5ba2b0f07946d75524fcdc4a1386fd4fd188b28a0c5f8c158e72188f94e4554b061d4034e11a7c768fd6d14f09e27fb242a42acf8bddd3ce5f9fd62b890005e6af0e8882c37dcabb4a71698f9a3f8826e31370ec19a2895ea5386cdd92af19fe26582c8df66a08ba3161ba17695284b78847356fa7d942b841e5d70089ba8c4ace28658a1d7c71a39b1ba6fca51515d6f909b8130f590bd24da4ae98f64b0a8dd7771"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x1c, r7, 0x800, 0x2, 0x0, {{}, {@val={0x8}, @void}}}, 0xfffffffffffffe0d}}, 0x8000) [ 1869.054640][T32211] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:23 executing program 1: r0 = semget$private(0x0, 0x2, 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/164) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000ff0054e3a183cb00a46b56411d2008a5b90b86c98a27a3a4832ef03697e87ec5167cbe357aaa25163a40c110ecbf4f40c9914e42", @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 05:14:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x12}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:23 executing program 1: r0 = semget$private(0x0, 0x2, 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/164) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000ff0054e3a183cb00a46b56411d2008a5b90b86c98a27a3a4832ef03697e87ec5167cbe357aaa25163a40c110ecbf4f40c9914e42", @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 05:14:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x18}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:23 executing program 1: r0 = semget$private(0x0, 0x2, 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/164) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000ff0054e3a183cb00a46b56411d2008a5b90b86c98a27a3a4832ef03697e87ec5167cbe357aaa25163a40c110ecbf4f40c9914e42", @ANYRES16=r2, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) 05:14:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x21}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) [ 1869.558710][T32250] netlink: 'syz-executor.2': attribute type 281 has an invalid length. 05:14:23 executing program 1: r0 = semget$private(0x0, 0x2, 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/164) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') 05:14:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x25}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:23 executing program 1: r0 = semget$private(0x0, 0x2, 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/164) socket$nl_generic(0x10, 0x3, 0x10) 05:14:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:24 executing program 1: r0 = semget$private(0x0, 0x2, 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/164) 05:14:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x48}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x0, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x4c}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:24 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/164) 05:14:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) [ 1870.209128][T32302] netlink: 'syz-executor.2': attribute type 281 has an invalid length. 05:14:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:24 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/164) 05:14:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x60}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:24 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:24 executing program 1: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/164) 05:14:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x68}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:24 executing program 1: r0 = semget$private(0x0, 0x0, 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/164) 05:14:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x150, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x150}}, 0x4000) 05:14:24 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x6c}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:25 executing program 1: r0 = semget$private(0x0, 0x0, 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/164) 05:14:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xfc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xfc}}, 0x4000) 05:14:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x74}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) [ 1870.902654][T32354] netlink: 'syz-executor.2': attribute type 281 has an invalid length. 05:14:25 executing program 1: r0 = semget$private(0x0, 0x0, 0x2) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/164) 05:14:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xfc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xfc}}, 0x4000) 05:14:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x7a}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:25 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:25 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/164) 05:14:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xfc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xfc}}, 0x4000) 05:14:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:25 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:25 executing program 1: semget$private(0x0, 0x2, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/164) 05:14:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:25 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:25 executing program 1: semget$private(0x0, 0x2, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/164) 05:14:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:25 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x140, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x43, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x140}}, 0x4000) 05:14:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:25 executing program 1: semget$private(0x0, 0x2, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/164) 05:14:25 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x3}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x4000) 05:14:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x140, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x43, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x140}}, 0x4000) 05:14:25 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) 05:14:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:25 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x4}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x4000) 05:14:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x140, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x43, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x140}}, 0x4000) 05:14:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:26 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) 05:14:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x4000) 05:14:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x5}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x4000) 05:14:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x0, 0x68, 0x42, 0xfff}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x90, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x90}}, 0x0) 05:14:26 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semctl$IPC_STAT(r0, 0x0, 0x2, 0x0) 05:14:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x4000) 05:14:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000) 05:14:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x6}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x0, 0x0, 0x42, 0xfff}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x4000) 05:14:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000) 05:14:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x90, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x90}}, 0x0) 05:14:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x4000) 05:14:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x7}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x0, 0x0, 0x0, 0xfff}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000) 05:14:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x90, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x90}}, 0x0) 05:14:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000) 05:14:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x8}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000) 05:14:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000) 05:14:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x9}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x144, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x45, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x144}}, 0x4000) 05:14:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x8}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000) 05:14:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000) 05:14:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000) 05:14:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x144, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x45, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x144}}, 0x4000) 05:14:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xa}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x8}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000) 05:14:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x144, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x45, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x144}}, 0x4000) 05:14:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000) 05:14:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xb}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) [ 1873.141979][T32543] __nla_validate_parse: 46 callbacks suppressed [ 1873.141994][T32543] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x0, 0x788}}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, r2, {0x7ff}}, 0x18) 05:14:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000) 05:14:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) [ 1873.245142][T32552] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xc}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, r2, {0x7ff}}, 0x18) [ 1873.404830][T32563] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) [ 1873.449213][T32567] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xd}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, r2, {0x7ff}}, 0x18) 05:14:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x110, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x110}}, 0x4000) 05:14:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) [ 1873.690249][T32585] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x110, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x110}}, 0x4000) 05:14:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) [ 1873.781882][T32593] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xe}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x110, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x110}}, 0x4000) 05:14:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) 05:14:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4000) [ 1873.996388][T32608] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1874.025289][T32612] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4000) 05:14:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x0, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xf}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) 05:14:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4000) [ 1874.207157][T32626] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x110, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x14, 0xf, [@random, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x110}}, 0x4000) 05:14:28 executing program 1: write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) 05:14:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) [ 1874.322149][T32632] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x110, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x14, 0xf, [@random, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x110}}, 0x0) 05:14:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x10}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x144, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}]]}, 0x144}}, 0x4000) 05:14:28 executing program 1: write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) 05:14:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4000) 05:14:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x11}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x144, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}]]}, 0x144}}, 0x4000) 05:14:28 executing program 1: write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) 05:14:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4000) 05:14:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x12}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x144, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}]]}, 0x144}}, 0x4000) 05:14:29 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) 05:14:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x4000) 05:14:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x18}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:29 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) 05:14:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}]]}, 0x7c}}, 0x4000) 05:14:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x4000) 05:14:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x21}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}]]}, 0x7c}}, 0x4000) 05:14:29 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x7ff}}, 0x18) 05:14:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x25}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x7c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}]]}, 0x7c}}, 0x4000) 05:14:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xd4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xd4}}, 0x4000) 05:14:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(r0, 0x0, 0x0) 05:14:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x48}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(r0, 0x0, 0x0) 05:14:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x80}}, 0x4000) 05:14:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b, @initial, {0x0, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x4c}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(r0, 0x0, 0x0) 05:14:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:29 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x80}}, 0x4000) 05:14:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x60}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18}, 0x18) 05:14:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x19c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x19c}}, 0x4000) 05:14:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x68}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x80, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x80}}, 0x4000) 05:14:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(r0, 0x0, 0x0) 05:14:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x198, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc4, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x198}}, 0x4000) 05:14:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x6c}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(r0, 0x0, 0x0) 05:14:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xcc}}, 0x4000) 05:14:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x198, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc3, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{0x6}, {0x3}, {0x6c}, {0x13}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x198}}, 0x4000) 05:14:30 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x43, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xc4}}, 0x4000) 05:14:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x74}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(r0, 0x0, 0x0) 05:14:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:30 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x198, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc2, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x6}, {0x3}, {0x6c}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x198}}, 0x4000) 05:14:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x43, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xc4}}, 0x4000) 05:14:30 executing program 1: write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) 05:14:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x7a}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:30 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x43, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xc4}}, 0x4000) 05:14:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x198, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc1, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x2, [{0x6}, {0x3}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x198}}, 0x4000) 05:14:30 executing program 1: write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) 05:14:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x300}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x0, 0x68, 0x42, 0xfff}}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xcc}}, 0x4000) 05:14:30 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc0, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x6}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:31 executing program 1: write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) 05:14:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x500}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x0, 0x0, 0x42, 0xfff}}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xcc}}, 0x4000) 05:14:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) 05:14:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x600}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x0, 0x0, 0x0, 0xfff}}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xcc}}, 0x4000) 05:14:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) 05:14:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6, {0x0, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xcc}}, 0x4000) 05:14:31 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x700}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:31 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) 05:14:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6, {0x0, 0x0, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xc8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x45, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xc8}}, 0x4000) 05:14:31 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x900}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x74}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6, {0x0, 0x0, 0x0, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xc8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x45, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xc8}}, 0x4000) 05:14:31 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xa00}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x5ac, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xc5, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5}, @device_b, @device_b, @initial, {0xd, 0x9}}, 0x0, @default, 0x80, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x6, [{0x6}, {0x3}, {0x6c}, {0x13}, {0x6}, {0xb}]}, @val={0x3, 0x1, 0xb5}, @val={0x4, 0x6, {0x9, 0x80, 0x125b, 0x200}}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_IE={0x10e, 0x2a, [@ibss={0x6, 0x2, 0x1f}, @prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x1f, @device_b, 0x39a, "", 0x1, 0x8, @broadcast, 0x25c}}, @perr={0x84, 0xbc, {0x5, 0xc, [@not_ext={{}, @device_a, 0x9, "", 0x40}, @not_ext={{}, @device_b, 0x2e1, "", 0x6}, @ext={{}, @broadcast, 0x200, @device_b, 0x12}, @ext={{}, @broadcast, 0x0, @broadcast, 0x2}, @not_ext={{}, @device_b, 0x97a9, "", 0x2}, @not_ext={{}, @broadcast, 0x6, "", 0x18}, @ext={{}, @device_b, 0x4, @device_a, 0xb}, @not_ext={{}, @broadcast, 0x4, "", 0xf}, @not_ext={{}, @broadcast, 0x4, "", 0x3c}, @not_ext={{}, @broadcast, 0xffff, "", 0x5}, @ext={{}, @device_a, 0x6, @device_b, 0x1}, @ext={{}, @broadcast, 0x9, @device_a, 0x9}]}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x8, 0x5, 0x0, 0x4, 0x0, 0x0, 0x1, 0x2}, 0xc, 0x1, 0x2}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x5, 0x80, 0x1a, 0x2}}]}, @NL80211_ATTR_BEACON_HEAD={0x356, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0xf7, {0x0, 0x0, 0x0, "fd8a38e83288194ce1916dbc08f32c88d53a4f2e38552d68e51be0d5f67b9d9287a8b2a113c48f05f63476624d1402e96e11d7183a1981ed06c2a6f1b8914a87d1d3931807572587d048d22bc266332e98faed85619175c1733a845e1aef29e890d3f19e66197d72b3c98d87139e18ff43945d64a3abaff6f1b80a92edcf4d776897ce149ccacddb2a8b8c2446615d916a54da91911ddc8020d1b10e18af1056e30d94e442a5ed55f4c0fffd681480c6e44ce5806a1c188f58ff4f26d45fc3d66ffb8657f6028a83903c2838f6b218ef160501dd09c8a464f58849ac26b400a062dc2d917a1e329a704511dd7f94ca55599f32fa"}}, @val={0x25, 0x3, {0x1, 0x3, 0x9}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x1, 0x5, 0x7, 0x9}}, [{0xdd, 0x47, "aa79aa1ba6885f46acc1e516ae8fc5a011e01b0b7868e4575016dd0cf0f08583e2bd7cf0e5f87b774755db7d0c48752e9985cf9aa32b48ad4333c194862c9549f3c55cf1d61da0"}, {0xdd, 0xcc, "32daeb0d0b747488855028bc3166c05b498b0119f74db3975ed0ba5e8e073493c70e1e3e3fadcfd5b76b3a309e448ec45e7c7b7a7a3ffdfa6cf03a903e9b631c418234512e2e54d3e6a472eb0e67c60f4b1ba5adea409f4865784d420302f9115a7e509c62621c886a822f1479888986adddcb9472cc370852a152285e2e4089a42edab54cdb934a4b44fb3360d744a6615d6e0ff8849446234ab3e855a2805b12df01a715e4442bbfd76af2f63d811be0e7ad5e6effe8935c97fb9ebdfb021f92187d5c6259a515dc751be2"}, {0xdd, 0x80, "175abb2b8370c32b4ac94e9492b5c5e8bed2e5ff1d795abe31ecb44513606192272ad2f8a9dbfcd74b26e35e32313ee1ba960ea98916035bcadd970a570aa6cda415eb6c3695dc4708a18da84d4302ae92870cf134479048a01dc06230200141b9f2e1fe4726cf81c0731d85b7a2520e1c4b721a9479bdd35a5f109ce9872f53"}, {0xdd, 0x72, "5181c897c522e7836f40c739f35333917c033e54947ad9f7952ac323d4ab1f732e60f3466fb16cac271d696e48898416f14b5b56191c89bcbd6bb7b62e8faf798e9d8bbbd61aa2424685b7f0146cde571087fe0e8a96242c13584d4b2aca073993024878c071bc39f59d8c678293f95f7c78"}]}}]]}, 0x5ac}}, 0x4000) 05:14:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xc8, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x45, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xc8}}, 0x4000) 05:14:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 05:14:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xb00}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r4, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x108, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_IE={0x87, 0x2a, [@mesh_chsw={0x76, 0x6, {0x64, 0x0, 0x15, 0x8001}}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x81, @broadcast, 0x6, "", 0x3, 0x100, @broadcast, 0x9}}, @dsss={0x3, 0x1, 0x6c}, @mesh_chsw={0x76, 0x6, {0x2, 0x0, 0x4, 0x4}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @rann={0x7e, 0x15, {{0x1, 0x2f}, 0x5, 0x3f, @device_a, 0x36, 0x100, 0x5}}, @ht={0x2d, 0x1a, {0x8000, 0x2, 0x6, 0x0, {0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x80000000, 0x5}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x124}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_USE_RRM={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x34008050}, 0x40010) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x14}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004050}, 0x80) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 05:14:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x0, 0x788}}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xcc}}, 0x4000) 05:14:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 05:14:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xc00}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r4, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x108, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_IE={0x87, 0x2a, [@mesh_chsw={0x76, 0x6, {0x64, 0x0, 0x15, 0x8001}}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x81, @broadcast, 0x6, "", 0x3, 0x100, @broadcast, 0x9}}, @dsss={0x3, 0x1, 0x6c}, @mesh_chsw={0x76, 0x6, {0x2, 0x0, 0x4, 0x4}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @rann={0x7e, 0x15, {{0x1, 0x2f}, 0x5, 0x3f, @device_a, 0x36, 0x100, 0x5}}, @ht={0x2d, 0x1a, {0x8000, 0x2, 0x6, 0x0, {0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x80000000, 0x5}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x124}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_USE_RRM={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x34008050}, 0x40010) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x14}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004050}, 0x80) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 05:14:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x0, 0xb1, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xcc}}, 0x4000) 05:14:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 05:14:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r4, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x108, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_IE={0x87, 0x2a, [@mesh_chsw={0x76, 0x6, {0x64, 0x0, 0x15, 0x8001}}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x81, @broadcast, 0x6, "", 0x3, 0x100, @broadcast, 0x9}}, @dsss={0x3, 0x1, 0x6c}, @mesh_chsw={0x76, 0x6, {0x2, 0x0, 0x4, 0x4}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @rann={0x7e, 0x15, {{0x1, 0x2f}, 0x5, 0x3f, @device_a, 0x36, 0x100, 0x5}}, @ht={0x2d, 0x1a, {0x8000, 0x2, 0x6, 0x0, {0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x80000000, 0x5}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x124}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_USE_RRM={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x34008050}, 0x40010) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x14}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004050}, 0x80) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 05:14:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xd00}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x0, 0x0, 0x1}}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) [ 1878.260303][ T491] __nla_validate_parse: 48 callbacks suppressed [ 1878.260318][ T491] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x94}}, 0x4000) [ 1878.310305][ T494] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 05:14:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x800, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) [ 1878.353910][ T497] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 05:14:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r4, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x108, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_IE={0x87, 0x2a, [@mesh_chsw={0x76, 0x6, {0x64, 0x0, 0x15, 0x8001}}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x81, @broadcast, 0x6, "", 0x3, 0x100, @broadcast, 0x9}}, @dsss={0x3, 0x1, 0x6c}, @mesh_chsw={0x76, 0x6, {0x2, 0x0, 0x4, 0x4}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @rann={0x7e, 0x15, {{0x1, 0x2f}, 0x5, 0x3f, @device_a, 0x36, 0x100, 0x5}}, @ht={0x2d, 0x1a, {0x8000, 0x2, 0x6, 0x0, {0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x80000000, 0x5}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x124}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_USE_RRM={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x34008050}, 0x40010) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x14}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004050}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') 05:14:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x94}}, 0x4000) 05:14:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xe00}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x3, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) [ 1878.531444][ T509] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 05:14:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 05:14:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x94}}, 0x4000) [ 1878.586039][ T513] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r4, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x108, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_IE={0x87, 0x2a, [@mesh_chsw={0x76, 0x6, {0x64, 0x0, 0x15, 0x8001}}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x81, @broadcast, 0x6, "", 0x3, 0x100, @broadcast, 0x9}}, @dsss={0x3, 0x1, 0x6c}, @mesh_chsw={0x76, 0x6, {0x2, 0x0, 0x4, 0x4}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @rann={0x7e, 0x15, {{0x1, 0x2f}, 0x5, 0x3f, @device_a, 0x36, 0x100, 0x5}}, @ht={0x2d, 0x1a, {0x8000, 0x2, 0x6, 0x0, {0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x80000000, 0x5}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x124}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_USE_RRM={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x34008050}, 0x40010) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x14}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004050}, 0x80) 05:14:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) [ 1878.657879][ T520] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) 05:14:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xf00}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) [ 1878.737339][ T525] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 05:14:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x0, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xcc}}, 0x4000) 05:14:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r3, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r4, 0xac00, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x108, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_IE={0x87, 0x2a, [@mesh_chsw={0x76, 0x6, {0x64, 0x0, 0x15, 0x8001}}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x81, @broadcast, 0x6, "", 0x3, 0x100, @broadcast, 0x9}}, @dsss={0x3, 0x1, 0x6c}, @mesh_chsw={0x76, 0x6, {0x2, 0x0, 0x4, 0x4}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @rann={0x7e, 0x15, {{0x1, 0x2f}, 0x5, 0x3f, @device_a, 0x36, 0x100, 0x5}}, @ht={0x2d, 0x1a, {0x8000, 0x2, 0x6, 0x0, {0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x80000000, 0x5}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x124}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_USE_RRM={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x34008050}, 0x40010) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) 05:14:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xc4, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xc4}}, 0x0) 05:14:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) [ 1878.863707][ T536] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) [ 1878.930195][ T540] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1878.968956][ T543] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 05:14:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x14, 0xf, [@random, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x94}}, 0x4000) 05:14:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x1100}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x94, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x14, 0xf, [@random, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x94}}, 0x0) 05:14:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r3, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r4, 0xac00, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x108, r2, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_IE={0x87, 0x2a, [@mesh_chsw={0x76, 0x6, {0x64, 0x0, 0x15, 0x8001}}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x81, @broadcast, 0x6, "", 0x3, 0x100, @broadcast, 0x9}}, @dsss={0x3, 0x1, 0x6c}, @mesh_chsw={0x76, 0x6, {0x2, 0x0, 0x4, 0x4}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @rann={0x7e, 0x15, {{0x1, 0x2f}, 0x5, 0x3f, @device_a, 0x36, 0x100, 0x5}}, @ht={0x2d, 0x1a, {0x8000, 0x2, 0x6, 0x0, {0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x80000000, 0x5}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x124}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_USE_RRM={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x34008050}, 0x40010) 05:14:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x0) 05:14:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x1200}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r3, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r4, 0xac00, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) 05:14:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_HE_OBSS_PD={0x3c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x14}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x4}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}]}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x36}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x3b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xcc}}, 0x0) 05:14:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x1, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x1800}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r3, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r4, 0xac00, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) 05:14:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xe00}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r4, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)={0x108, r3, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x67}}}}, [@NL80211_ATTR_IE={0x87, 0x2a, [@mesh_chsw={0x76, 0x6, {0x64, 0x0, 0x15, 0x8001}}, @mesh_id={0x72, 0x6}, @prep={0x83, 0x1f, @not_ext={{}, 0x6, 0x81, @broadcast, 0x6, "", 0x3, 0x100, @broadcast, 0x9}}, @dsss={0x3, 0x1, 0x6c}, @mesh_chsw={0x76, 0x6, {0x2, 0x0, 0x4, 0x4}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @rann={0x7e, 0x15, {{0x1, 0x2f}, 0x5, 0x3f, @device_a, 0x36, 0x100, 0x5}}, @ht={0x2d, 0x1a, {0x8000, 0x2, 0x6, 0x0, {0x8, 0x4, 0x0, 0x3, 0x0, 0x1, 0x1, 0x3, 0x1}, 0x1, 0x80000000, 0x5}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x124}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_USE_RRM={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x34008050}, 0x40010) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r3, 0x8, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x14}, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004050}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') 05:14:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0xd14, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x2000}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xcc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xcc}}, 0x4000) 05:14:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r3, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r4, 0xac00, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') 05:14:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 05:14:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x5}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:33 executing program 4: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x4000, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000001940)=ANY=[@ANYBLOB="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"]) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vfio/vfio\x00', 0x200042, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r4, 0xac00, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r3, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x6}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8000}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="018020000000000000000f00000000000000", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000006400)='/dev/dlm-control\x00', 0x121040, 0x0) write$FUSE_NOTIFY_POLL(r5, &(0x7f0000006480)={0x18, 0x1, 0x0, {0x4}}, 0x18) write$FUSE_OPEN(r5, &(0x7f00000064c0)={0x20, 0x409b575975e1f6b3, 0x0, {0x0, 0x2}}, 0x20) write$FUSE_INIT(r4, &(0x7f0000000400)={0x50, 0xb, 0x0, {0x7, 0x20, 0x1, 0x2204000, 0x7, 0x4, 0x63, 0x8}}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) 05:14:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x2100}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:33 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r3, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r4, 0xac00, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 05:14:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x0, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x2500, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:34 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10}, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast]}, 0x40) 05:14:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x0, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r3, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r4, 0xac00, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 05:14:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff010000", @ANYRES16=r0, @ANYBLOB="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"], 0x210}}, 0x3) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x0, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x2500}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x0, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r3, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r4, 0xac00, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) 05:14:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x2eec}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x2500}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') socketpair(0xa, 0x3, 0x4c71, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r6, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x14, r1, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}}, 0x14}}, 0x0) 05:14:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r3, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r4, 0xac00, 0x0) 05:14:34 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fdd305f4350a09ae60007ca85a8b2913bc70456ed6ca53e808decd96011df4724db34ab4f7fb891d6a8da247b79a8ba048fbcea846642aab7c82e2e10d67c3664bbcdc5089a1f573044c056e7cfa5b2bc98fc6a649488285644d3cd2b0537e83d23f42d9cf84e24f6de14795759522c4dab46aca2d810bf2fc94d258242a875ca5982a669533cdc76715f45428d71a684e6d91f9d6f446dbe7f705800a1fa92c3a51b9162786bee26c43445b72730d285943c411bff5aecfea6ae1a4362b656d354e9f0effde5a7af98d010886b86e56071b9f468532938c0089c430ba27beb3feb5bcda1d8df5627da4cce66e6cedd066d724cf84372fc34d2db85926e225fb955b47ed02d18369824859bdce2ce220322dadb66affb2bd5a7a1a39711b82c39ebf26ec92fdfa1e06f72979b9e42cf4745beb874f668185e75f36b0a097f17d12ceaadd9cfe5c7737f932813376e14373a12de883a0470e1c461f55b7dbf98c95b88502027c090e67de2a9d88533b57abed37f057b523059a7412ceaaa3f2bb178a00737390656a77707ec932c69b1a649540f07c2241adbda915065239488a3ddf564679124a93114a09182bcb283e0df32d6595f30b4293c88df71bf3141172779c4f86c008f900c6416c8fda9b6f86924093a659c067", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x200) inotify_rm_watch(r3, r4) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x367}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff8000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x40004) 05:14:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x4000}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') socketpair(0xa, 0x3, 0x4c71, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r6, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r3, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) 05:14:34 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x200) inotify_rm_watch(r3, r4) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x367}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff8000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x40004) 05:14:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x4800}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') socketpair(0xa, 0x3, 0x4c71, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r7, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r6, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x4c00}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:34 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32=r3, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:34 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fdd305f4350a09ae60007ca85a8b2913bc70456ed6ca53e808decd96011df4724db34ab4f7fb891d6a8da247b79a8ba048fbcea846642aab7c82e2e10d67c3664bbcdc5089a1f573044c056e7cfa5b2bc98fc6a649488285644d3cd2b0537e83d23f42d9cf84e24f6de14795759522c4dab46aca2d810bf2fc94d258242a875ca5982a669533cdc76715f45428d71a684e6d91f9d6f446dbe7f705800a1fa92c3a51b9162786bee26c43445b72730d285943c411bff5aecfea6ae1a4362b656d354e9f0effde5a7af98d010886b86e56071b9f468532938c0089c430ba27beb3feb5bcda1d8df5627da4cce66e6cedd066d724cf84372fc34d2db85926e225fb955b47ed02d18369824859bdce2ce220322dadb66affb2bd5a7a1a39711b82c39ebf26ec92fdfa1e06f72979b9e42cf4745beb874f668185e75f36b0a097f17d12ceaadd9cfe5c7737f932813376e14373a12de883a0470e1c461f55b7dbf98c95b88502027c090e67de2a9d88533b57abed37f057b523059a7412ceaaa3f2bb178a00737390656a77707ec932c69b1a649540f07c2241adbda915065239488a3ddf564679124a93114a09182bcb283e0df32d6595f30b4293c88df71bf3141172779c4f86c008f900c6416c8fda9b6f86924093a659c067", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x200) inotify_rm_watch(r3, r4) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x367}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff8000}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20}, 0x40004) 05:14:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') socketpair(0xa, 0x3, 0x4c71, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r5, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x81, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x6000}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') socketpair(0xa, 0x3, 0x4c71, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r6, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x84) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r5, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x31d, 0x12}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7a02d9ec52"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x2c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7d600}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000080) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:35 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fdd305f4350a09ae60007ca85a8b2913bc70456ed6ca53e808decd96011df4724db34ab4f7fb891d6a8da247b79a8ba048fbcea846642aab7c82e2e10d67c3664bbcdc5089a1f573044c056e7cfa5b2bc98fc6a649488285644d3cd2b0537e83d23f42d9cf84e24f6de14795759522c4dab46aca2d810bf2fc94d258242a875ca5982a669533cdc76715f45428d71a684e6d91f9d6f446dbe7f705800a1fa92c3a51b9162786bee26c43445b72730d285943c411bff5aecfea6ae1a4362b656d354e9f0effde5a7af98d010886b86e56071b9f468532938c0089c430ba27beb3feb5bcda1d8df5627da4cce66e6cedd066d724cf84372fc34d2db85926e225fb955b47ed02d18369824859bdce2ce220322dadb66affb2bd5a7a1a39711b82c39ebf26ec92fdfa1e06f72979b9e42cf4745beb874f668185e75f36b0a097f17d12ceaadd9cfe5c7737f932813376e14373a12de883a0470e1c461f55b7dbf98c95b88502027c090e67de2a9d88533b57abed37f057b523059a7412ceaaa3f2bb178a00737390656a77707ec932c69b1a649540f07c2241adbda915065239488a3ddf564679124a93114a09182bcb283e0df32d6595f30b4293c88df71bf3141172779c4f86c008f900c6416c8fda9b6f86924093a659c067", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x200) inotify_rm_watch(r3, r4) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) 05:14:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x20, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x6800}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') socketpair(0xa, 0x3, 0x4c71, &(0x7f00000003c0)) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r5, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:35 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="28007a80240001000f5aaf5f03260311e8640a2f7ee9e98d2fae0d534c27e236fc55e44321ec32d974007a80140001002742f54a26d349ba593c2d02ca961ab20c0003003e7cb88af47fff7c1400010004f690c90f070754780df2eee4a89258140001002c3959a4ab8bfdd6149c433d3b11781408000400050000000c0003000c6c7d1ef14e488c140001005fa7d82bd6176a9cab5e58ba66c3722478007a80080004000100008024000100a74ff8c74ab8d8420c17b7da1712cc15261d40a2adb83f40cc6c446725c7fdf90c00030078e15fb12cf3164324000100493f2a52cfd30b6ad33d7172d2e9e67157804bbd74a3b92b2bf00d7378a6e818080004001f0000000800040002000000080004008100000004007a8024007a80140002003172b59d2e4724368038980259060dc00c0003008f335ef0f833ecdc34007a801c00020037202c821c8fe4dd265c18b4b887313e33c5da84edd73b5508000400000000000c000300c6da1ebb9f410d1b"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x200) inotify_rm_watch(r3, r4) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) 05:14:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x0, 0xa, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x6c00}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:35 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fdd305f4350a09ae60007ca85a8b2913bc70456ed6ca53e808decd96011df4724db34ab4f7fb891d6a8da247b79a8ba048fbcea846642aab7c82e2e10d67c3664bbcdc5089a1f573044c056e7cfa5b2bc98fc6a649488285644d3cd2b0537e83d23f42d9cf84e24f6de14795759522c4dab46aca2d810bf2fc94d258242a875ca5982a669533cdc76715f45428d71a684e6d91f9d6f446dbe7f705800a1fa92c3a51b9162786bee26c43445b72730d285943c411bff5aecfea6ae1a4362b656d354e9f0effde5a7af98d010886b86e56071b9f468532938c0089c430ba27beb3feb5bcda1d8df5627da4cce66e6cedd066d724cf84372fc34d2db85926e225fb955b47ed02d18369824859bdce2ce220322dadb66affb2bd5a7a1a39711b82c39ebf26ec92fdfa1e06f72979b9e42cf4745beb874f668185e75f36b0a097f17d12ceaadd9cfe5c7737f932813376e14373a12de883a0470e1c461f55b7dbf98c95b88502027c090e67de2a9d88533b57abed37f057b523059a7412ceaaa3f2bb178a00737390656a77707ec932c69b1a649540f07c2241adbda915065239488a3ddf564679124a93114a09182bcb283e0df32d6595f30b4293c88df71bf3141172779c4f86c008f900c6416c8fda9b6f86924093a659c067", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x200) inotify_rm_watch(r3, r4) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r5, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x7400}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0x8000}}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:35 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="28007a80240001000f5aaf5f03260311e8640a2f7ee9e98d2fae0d534c27e236fc55e44321ec32d974007a80140001002742f54a26d349ba593c2d02ca961ab20c0003003e7cb88af47fff7c1400010004f690c90f070754780df2eee4a89258140001002c3959a4ab8bfdd6149c433d3b11781408000400050000000c0003000c6c7d1ef14e488c140001005fa7d82bd6176a9cab5e58ba66c3722478007a80080004000100008024000100a74ff8c74ab8d8420c17b7da1712cc15261d40a2adb83f40cc6c446725c7fdf90c00030078e15fb12cf3164324000100493f2a52cfd30b6ad33d7172d2e9e67157804bbd74a3b92b2bf00d7378a6e818080004001f0000000800040002000000080004008100000004007a8024007a80140002003172b59d2e4724368038980259060dc00c0003008f335ef0f833ecdc34007a801c00020037202c821c8fe4dd265c18b4b887313e33c5da84edd73b5508000400000000000c000300c6da1ebb9f410d1b"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x200) inotify_rm_watch(r3, r4) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x194, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0xbf, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}, [{0xdd, 0x42, "10d0eb239219c2003578adbc422684ba7254b7762199edddd4264d83a0f5d0cf3535ceab9c3efb992c50b0b2acb2e61eae49a5386df0da322c295f31a76c47e5731d"}]}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x194}}, 0x4000) 05:14:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x7a00}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:35 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x200) inotify_rm_watch(r3, r4) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x150, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x53, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x150}}, 0x4000) 05:14:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0xec2e}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xfc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xfc}}, 0x4000) 05:14:35 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x200) inotify_rm_watch(r3, r4) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:35 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:35 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x14}]}, 0x28}}, 0x0) 05:14:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xfc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xfc}}, 0x4000) 05:14:36 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0xfc, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0xfc}}, 0x4000) 05:14:36 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x200) inotify_rm_watch(r3, r4) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r5, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:36 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r5, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x7f, 0x68, 0x42, 0xfff}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:36 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="28007a80240001000f5aaf5f03260311e8640a2f7ee9e98d2fae0d534c27e236fc55e44321ec32d974007a80140001002742f54a26d349ba593c2d02ca961ab20c0003003e7cb88af47fff7c1400010004f690c90f070754780df2eee4a89258140001002c3959a4ab8bfdd6149c433d3b11781408000400050000000c0003000c6c7d1ef14e488c140001005fa7d82bd6176a9cab5e58ba66c3722478007a80080004000100008024000100a74ff8c74ab8d8420c17b7da1712cc15261d40a2adb83f40cc6c446725c7fdf90c00030078e15fb12cf3164324000100493f2a52cfd30b6ad33d7172d2e9e67157804bbd74a3b92b2bf00d7378a6e818080004001f0000000800040002000000080004008100000004007a8024007a80140002003172b59d2e4724368038980259060dc00c0003008f335ef0f833ecdc34007a801c00020037202c821c8fe4dd265c18b4b887313e33c5da84edd73b5508000400000000000c000300c6da1ebb9f410d1b"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x200) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:36 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x140, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x43, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x140}}, 0x4000) 05:14:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r2, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef, 0x11b, 0x0, 0x0}]}, 0x28}}, 0x0) 05:14:36 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:36 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r2, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x140, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x43, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x140}}, 0x4000) 05:14:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x10}}, 0x0) 05:14:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x140, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x43, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x140}}, 0x4000) 05:14:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r2, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:36 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="28007a80240001000f5aaf5f03260311e8640a2f7ee9e98d2fae0d534c27e236fc55e44321ec32d974007a80140001002742f54a26d349ba593c2d02ca961ab20c0003003e7cb88af47fff7c1400010004f690c90f070754780df2eee4a89258140001002c3959a4ab8bfdd6149c433d3b11781408000400050000000c0003000c6c7d1ef14e488c140001005fa7d82bd6176a9cab5e58ba66c3722478007a80080004000100008024000100a74ff8c74ab8d8420c17b7da1712cc15261d40a2adb83f40cc6c446725c7fdf90c00030078e15fb12cf3164324000100493f2a52cfd30b6ad33d7172d2e9e67157804bbd74a3b92b2bf00d7378a6e818080004001f0000000800040002000000080004008100000004007a8024007a80140002003172b59d2e4724368038980259060dc00c0003008f335ef0f833ecdc34007a801c00020037202c821c8fe4dd265c18b4b887313e33c5da84edd73b5508000400000000000c000300c6da1ebb9f410d1b"], 0x18c}}, 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:36 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x14}}, 0x0) 05:14:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x0, 0x68, 0x42, 0xfff}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:36 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r2, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0xc0}}, 0x0) 05:14:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x0, 0x0, 0x42, 0xfff}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:36 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:36 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6, {0x0, 0x0, 0x0, 0xfff}}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0xec0}}, 0x0) 05:14:37 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:37 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:37 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x14, 0x788}}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x33fe0}}, 0x0) 05:14:37 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:37 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:37 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:37 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x144, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x45, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x144}}, 0x4000) 05:14:37 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x20000128}}, 0x0) 05:14:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 05:14:37 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:37 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x144, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x45, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x144}}, 0x4000) 05:14:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, 0x0, 0x40400) 05:14:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 05:14:37 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:37 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x7ffff000}}, 0x0) 05:14:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x144, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x45, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x144}}, 0x4000) 05:14:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, 0x0, 0x40400) 05:14:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 05:14:37 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0xfffffdef}}, 0x0) 05:14:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4, {0x0, 0x788}}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, 0x0, 0x40400) 05:14:37 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) [ 1883.663870][ T955] __nla_validate_parse: 63 callbacks suppressed [ 1883.663887][ T955] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 05:14:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x2}, 0x0) 05:14:37 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x3f, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 05:14:38 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) [ 1883.813545][ T967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1883.853179][ T970] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x110, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x110}}, 0x4000) 05:14:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:38 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:38 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x5}, 0x0) 05:14:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 05:14:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:38 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x110, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x110}}, 0x4000) 05:14:38 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0) 05:14:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:38 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x110, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x12, 0xf, [@chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x110}}, 0x4000) 05:14:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x8}, 0x0) 05:14:38 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x34}}, 0x0) 05:14:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, 0x0, 0x0) 05:14:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x148, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x4b, 0xf, [@random={0x0, 0x37, "09492e47b80d13d6ebabfc0dae4dba674514298c27bf3fb1221a5ce6fd1946e3bb763617452fdca19d0592f8e58bfdc9244d21c240e5fc"}, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x148}}, 0x4000) 05:14:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x34}}, 0x0) 05:14:38 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0xf}, 0x0) 05:14:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:38 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, 0x0, 0x0) 05:14:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x34}}, 0x0) 05:14:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x110, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x14, 0xf, [@random, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x110}}, 0x4000) 05:14:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x18}, 0x0) 05:14:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:38 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32], 0x34}}, 0x0) 05:14:38 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:38 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, 0x0, 0x0) 05:14:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)={0x110, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_TAIL={0x14, 0xf, [@random, @chsw_timing={0x68, 0x4}, @mesh_chsw={0x76, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x7b, 0xe, {@wo_ht={{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {@with_ht={{{}, {}, @device_a, @device_b, @random="ec12b513371a"}}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x5, 0x3}, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x110}}, 0x0) 05:14:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x25}, 0x0) [ 1884.777326][ T1055] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 05:14:39 executing program 2: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b"], 0x34}}, 0x0) 05:14:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x300}, 0x0) 05:14:39 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) [ 1884.985403][ T1071] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 05:14:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1], 0x34}}, 0x0) 05:14:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7ffffff2}, 0x0) 05:14:39 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) 05:14:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:39 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) openat$cgroup_int(r0, 0x0, 0x2, 0x0) 05:14:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1], 0x34}}, 0x0) 05:14:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7ffffff8}, 0x0) 05:14:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:39 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1], 0x34}}, 0x0) 05:14:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7ffffff9}, 0x0) 05:14:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:39 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x34}}, 0x0) 05:14:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:39 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0xffffff1f}, 0x0) 05:14:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x34}}, 0x0) 05:14:39 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:40 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x2}, 0x0) 05:14:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x34}}, 0x0) 05:14:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) [ 1885.934221][ T1156] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) [ 1886.002938][ T1162] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec8"], 0x34}}, 0x0) 05:14:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:40 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x3}, 0x0) 05:14:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) [ 1886.129565][ T1173] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 05:14:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x0, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x34}}, 0x0) 05:14:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) [ 1886.251828][ T1180] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:40 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:40 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) [ 1886.328288][ T1188] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x0, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x4}, 0x0) 05:14:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x34}}, 0x0) 05:14:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 05:14:40 executing program 2: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x34}}, 0x0) 05:14:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x0, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x5}, 0x0) 05:14:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 05:14:40 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c7"], 0x34}}, 0x0) 05:14:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x305, 0x0, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x12, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x6}, 0x0) 05:14:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 05:14:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x305, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x34}}, 0x0) 05:14:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x7}, 0x0) 05:14:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x10, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7}, 0x0) 05:14:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x34}}, 0x0) 05:14:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x305, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x8}, 0x0) 05:14:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 05:14:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7}, 0x0) 05:14:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x34}}, 0x0) 05:14:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r1, 0x305, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7}, 0x0) 05:14:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 05:14:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x9}, 0x0) 05:14:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697"], 0x34}}, 0x0) 05:14:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0xffff, 0x3ff, 0x6, 0x7]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 05:14:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r1, 0x305, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x7}, 0x0) 05:14:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"], 0x34}}, 0x0) 05:14:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xa}, 0x0) 05:14:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0xffff, 0x3ff, 0x6]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r1, 0x305, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7}, 0x0) 05:14:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x7}, 0x0) 05:14:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"], 0x34}}, 0x0) 05:14:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xb}, 0x0) 05:14:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0xffff, 0x3ff]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x305, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x7}, 0x0) 05:14:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"], 0x34}}, 0x0) 05:14:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7}, 0x0) 05:14:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xc}, 0x0) 05:14:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0xffff]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r1, 0x305, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000080000100000008"], 0x34}}, 0x0) 05:14:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x7}, 0x0) 05:14:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x7}, 0x0) 05:14:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xd}, 0x0) 05:14:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r1, 0x305, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x7}, 0x0) 05:14:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000"], 0x34}}, 0x0) 05:14:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x7}, 0x0) 05:14:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x7}, 0x0) 05:14:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, r1, 0x305, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 05:14:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xe}, 0x0) 05:14:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000"], 0x34}}, 0x0) 05:14:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x7}, 0x0) 05:14:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x7}, 0x0) 05:14:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0xffff, 0x3ff]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x34}}, 0x0) 05:14:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xf}, 0x0) 05:14:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x7}, 0x0) 05:14:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000"], 0x34}}, 0x0) 05:14:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x18}}, 0x40400) 05:14:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0}, 0x7}, 0x0) 05:14:42 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r0, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x7}, 0x0) 05:14:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x10}, 0x0) 05:14:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000080"], 0x34}}, 0x0) 05:14:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x18}}, 0x0) 05:14:42 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:42 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) [ 1888.698801][ T1394] __nla_validate_parse: 27 callbacks suppressed [ 1888.698817][ T1394] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000080"], 0x34}}, 0x0) 05:14:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x7}, 0x0) 05:14:42 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:42 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) [ 1888.822003][ T1405] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r2, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000080"], 0x34}}, 0x0) 05:14:43 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) bind$rose(r2, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fdd305f4350a09ae60007ca85a8b2913bc70456ed6ca53e808decd96011df4724db34ab4f7fb891d6a8da247b79a8ba048fbcea846642aab7c82e2e10d67c3664bbcdc5089a1f573044c056e7cfa5b2bc98fc6a649488285644d3cd2b0537e83d23f42d9cf84e24f6de14795759522c4dab46aca2d810bf2fc94d258242a875ca5982a669533cdc76715f45428d71a684e6d91f9d6f446dbe7f705800a1fa92c3a51b9162786bee26c43445b72730d285943c411bff5aecfea6ae1a4362b656d354e9f0effde5a7af98d010886b86e56071b9f468532938c0089c430ba27beb3feb5bcda1d8df5627da4cce66e6cedd066d724cf84372fc34d2db85926e225fb955b47ed02d18369824859bdce2ce220322dadb66affb2bd5a7a1a39711b82c39ebf26ec92fdfa1e06f72979b9e42cf4745beb874f668185e75f36b0a097f17d12ceaadd9cfe5c7737f932813376e14373a12de883a0470e1c461f55b7dbf98c95b88502027c090e67de2a9d88533b57abed37f057b523059a7412ceaaa3f2bb178a00737390656a77707ec932c69b1a649540f07c2241adbda915065239488a3ddf564679124a93114a09182bcb283e0df32d6595f30b4293c88df71bf3141172779c4f86c008f900c6416c8fda9b6f86924093a659c067", @ANYRES16=0x0, @ANYBLOB="08072bbd7000fedbdf254f00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x18c}}, 0x4) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x11}, 0x0) 05:14:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}, 0x7}, 0x0) 05:14:43 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) 05:14:43 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000008000010000000851391cf400fc00d55cdf0697b0d6376cecd1885b95c428fa9d18cdaa064643b607bc08e0c763c4c3688b3fdc396654904706eea92e57a9b1ecbe662ecb2b507dbd48dff4553b54d388958ec9db674e36e49be544d1379ec85d7db3ee4cd6549fe3c49d2c56f94a06c6c1a38037a85a2848e06fc198c501ef951af91038fa3b0b88be419830f293b91ccd083a2ab555448ae3d508bcc28c2bfb616542a40e8b260253164d046b8da8145a9216928236fb05f88d998d05039a9cd4aee904630b", @ANYRES32, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) 05:14:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000080000100"], 0x34}}, 0x0) [ 1889.034248][ T1422] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r5, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 05:14:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) 05:14:43 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x200100, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x2, 0x6, 0x4, 0x81}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x200000, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) [ 1889.116096][ T1427] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1889.125823][ T1428] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x4800}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{0xf, 0x0, 0x4000}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000080"], 0x34}}, 0x0) 05:14:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x12}, 0x0) 05:14:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x11}, 0x0) 05:14:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4d}}}}, [@NL80211_ATTR_PBSS={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c0c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x50, r3, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ed}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x353}]]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x937ef228a9d9112b) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r5, 0x305, 0x357, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x64}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="9c04cca02b79"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) [ 1889.266905][ T1439] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1889.279929][ T1441] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1889.337466][ T1447] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1889.370394][ T1448] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 05:14:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000080"], 0x34}}, 0x0) 05:14:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x70044002}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x16, 0xbd, [0xffff, 0x3ff, 0x6, 0x7, 0x5, 0xfffe, 0xfd2, 0x3, 0x7]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40400) [ 1889.385756][ T1450] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:43 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000000c0)={0xcd0, r4, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x16, 0x6, 0x5, 0x1, 0x16, 0x2, 0x12, 0x6, 0x12, 0x4, 0x1, 0x3, 0x6c, 0x18, 0x18, 0x24, 0x12]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x18, 0x16, 0x36, 0x60, 0xc, 0x12, 0x5]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7}, {0x3, 0x9}, {0x3, 0x5}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0x3}, {0x3, 0xa}, {0x5, 0x9}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0x9}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x5}, {0x4, 0x4}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x7}, {0x7, 0x7}, {0x2, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x3}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x7}, {0x2, 0x1a}, {0x2, 0x6}, {0x2, 0x5}, {0x3, 0x8}, {0x7, 0x9}, {0x1, 0x2}, {0x2, 0x5}, {0x4}, {0x3, 0x8}, {0x7, 0xa}, {0x2, 0x5}, {0x7, 0x9}, {0x6}, {0x0, 0x9}, {0x6}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {}, {0x3, 0x5}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x6, 0x3}, {0x3, 0x5}, {0x1, 0x2}, {}, {0x0, 0x8}, {0x4, 0x2}, {0x5, 0x3}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0xa}, {0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x5, 0x2}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x9}, {0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0x3}, {0x3}, {0x7}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x8}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0xa}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0x2}, {}, {0x5}, {0x4, 0x6}, {0x0, 0x1}, {0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x9}, {0x4, 0x2}, {0x6}, {0x5, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1}, {0x5, 0x6}, {0x3, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {0x6}, {0x2, 0xa}, {0x2, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x2, 0x8}, {0x2}, {0x0, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x6, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x4, 0x3}, {0x2}, {0x4, 0x1}, {0x1, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x1, 0x4}, {}, {0x0, 0x6}, {0x2, 0x6}, {0x7, 0x5}, {0x0, 0x8}, {0x5, 0x8}, {0x5, 0x8}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x8}, {0x2, 0x8}, {0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x7, 0xa}, {0x2, 0x1}, {0x4, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x328f3a4d1b68347b}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x7}, {0x3, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x6, 0x1}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x5, 0x24, 0x60, 0x12, 0x9, 0x1, 0x1, 0x4, 0x1, 0x3, 0x2, 0x30, 0x1, 0x6, 0x1, 0x6c, 0x6, 0x6c, 0x60, 0x4, 0x16, 0x2, 0x6c, 0x18, 0x12, 0x16, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x200, 0x19bd, 0x0, 0x1, 0x7, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0xa}, {0x2, 0xa}, {0x6, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81, 0xef, 0x9, 0x7839, 0x4, 0x7, 0xe57]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x2, 0x8}, {0x4}, {0x4, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x1, 0x9}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x8}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x4, 0x4}, {0x4, 0x7}, {0x6}, {0x5, 0x5}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0x5}, {0x2, 0x2}, {0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0x6}, {0x7}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x6, 0x3}, {0x6, 0xa}, {0x6, 0x1}, {0x3, 0x8}, {0x4, 0x6}, {0x3, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x8}, {0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x2, 0x3}, {0x6, 0x7}, {0x5, 0x3}, {0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x7, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x5, 0x7, 0x4, 0x9, 0xa1c, 0xfff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x974, 0xdb4, 0x4, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x16, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x2, 0x12, 0x24, 0x16, 0x18, 0x3, 0x48, 0x12, 0x60, 0xc, 0x4, 0x36, 0x12, 0x6c, 0x2, 0x24, 0x48, 0x4, 0x24, 0x24, 0x3, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x8}, {0x2, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x7}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x5, 0x7}, {0x2}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {0x2, 0x8}, {0x6, 0x5}, {0x2, 0x9}, {0x6, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0xe4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x6, 0xc, 0x9, 0x0, 0x4, 0x3, 0x4b, 0x6c, 0x4, 0x18, 0x6c, 0x24, 0x24, 0xc, 0x36]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x2}, {0x2, 0x7}, {0x2, 0x9}, {0x5, 0x9}, {0x3, 0x4}, {0x3, 0x9}, {0x5, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x5, 0x2}, {0x7, 0x4}, {0x0, 0x8}, {0x6, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0xa}, {0x7, 0x5}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x6, 0x9}, {0x6, 0x3}, {0x1}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x3, 0x8}, {0x4, 0x6}, {0x2, 0x9}, {0x5}, {0x7, 0x4}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x3}, {0x1}, {0x4, 0x6}, {0x6}, {0x6}, {0x3}, {0x5}, {0x7, 0x4}, {0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x8}, {0x2, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x6, 0x2, 0x48, 0x6c, 0x16, 0x30, 0x3, 0x3, 0x3, 0xb, 0x36, 0x6, 0x9, 0xb, 0x30, 0x30, 0x3, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff89, 0x4, 0x8, 0x1f, 0x3, 0x3f, 0x6]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x7}, {0x6, 0x1}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x2}, {0x6, 0x5}, {0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x3}, {0x4}, {0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x2, 0x7, 0xff5f, 0xd3b, 0x606e, 0x1]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x7ff, 0x3, 0x5, 0x8, 0x969d, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xf8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x66, 0x1f, 0x18, 0x1b, 0x6, 0x40, 0x60, 0x1b, 0x2c, 0x16, 0x16, 0x30, 0x9, 0x16, 0x6, 0x5, 0x36, 0x6, 0x6c, 0x57, 0xc, 0xc, 0x60, 0x9, 0x18, 0x12, 0xc, 0x2, 0x1, 0x36, 0x2, 0x1d]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x1}, {0x4, 0xa}, {0x3}, {0x7, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0x4}, {0x5, 0xa}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0xb, 0xb, 0x6c, 0x2, 0xc, 0x4, 0x3, 0xb, 0x18, 0x1b, 0x9, 0x60, 0x3, 0x36, 0x1b, 0xc, 0x1b, 0xb, 0x24, 0x1, 0x3, 0x5, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x2, 0x9782, 0x1000, 0xffff, 0x6, 0xb3b2]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x1}, {0x0, 0x7}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x4, 0x6}, {0x3, 0x4}, {0x7, 0x5}, {0x7, 0x4}, {0x5, 0x3}, {0x3, 0x1}, {}, {0x6, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x4}, {0x6, 0x9}, {0x2, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x5, 0x6}, {0x6, 0x7}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0xa}, {0x5, 0x8}, {0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4665, 0x3, 0x8, 0x4, 0x121, 0x7, 0x3f]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0xc, 0x3, 0x6c, 0x1, 0x0, 0x9, 0x9, 0xb, 0xb, 0x18, 0x60, 0x18, 0x36, 0x16, 0x9, 0x6c, 0x3, 0x6, 0x67, 0x18, 0x4, 0xc, 0x5, 0x44, 0x2, 0x30, 0x4, 0x9]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x7}, {0x1, 0x6}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x5}, {0x5, 0x5}, {0x5, 0x9}, {0x7, 0x9}, {0x6}, {0x6}, {0x1, 0x6}, {0x2}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x4}, {0x6, 0x7}, {0x3, 0x7}, {0x2, 0x8}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0x9}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x7}, {0x3, 0xa}, {0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0xa}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x4}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x4}, {0x5}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x1b}, {0x5, 0x4}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x3}, {0x4, 0x3}, {0x4, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfe01, 0xff, 0xfffb, 0xfffe, 0x4, 0xfff]}}]}]}, @NL80211_ATTR_TX_RATES={0x508, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x61, 0x18, 0x2, 0x1, 0x2, 0x3, 0x6, 0x30, 0x4, 0xc, 0x24, 0x48, 0x36, 0x2, 0x16, 0x1, 0x98b1ea3623d31383, 0x4, 0x60, 0x6c, 0x18, 0x5, 0x36, 0x3, 0x48, 0x36, 0x30, 0x1]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0xa}, {0x0, 0x2}, {0x5, 0x9}, {0x2, 0x9}, {0x7, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x12, 0x12, 0x4, 0x6, 0x2, 0x18, 0x18, 0x16, 0x24, 0x16, 0x30, 0x66, 0x3, 0x3, 0xb, 0xb, 0x2, 0x24, 0x30, 0x2, 0xb, 0x12, 0xa610ad853a0ef515, 0x5, 0x1b, 0x6c, 0x60, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x1}, {0x6, 0x5}, {0x3, 0x5}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0xa}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x1}, {0x2, 0x2}, {0x2}, {0x1, 0x5}, {0x1}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x4, 0x8}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x4, 0x6}, {0x2, 0x4}, {0x3}, {0x1, 0x5}, {0x7}, {0x1, 0x8}, {0x6, 0x3}, {0x7, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1b, 0x30, 0x30, 0x3, 0x3, 0x3, 0x1, 0x1b, 0x48]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x9, 0x3, 0x6c, 0x2, 0x12, 0x18, 0x9, 0x48, 0xb, 0x6, 0x66, 0x16, 0xb, 0x6, 0x30, 0x3, 0x6, 0x9, 0x16, 0x30, 0x16, 0x24, 0x2, 0x16]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x16, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x757a, 0x8, 0x0, 0x1, 0x4, 0x1000, 0x4, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0xb, 0xc, 0x16, 0x3, 0x12, 0x16, 0x36, 0x3, 0x48, 0x6c, 0x4, 0x18, 0x3, 0x18, 0x9, 0x4, 0x24, 0xc, 0x1b, 0x0, 0xb, 0x12, 0x6c, 0x1b, 0x3, 0x30, 0x3, 0xce1bbb4d77a511e0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x6, 0x3}, {0x1, 0x1}, {0x5, 0xa}, {0x2, 0x9}, {0x2}, {0x3, 0x7}, {0x3, 0x2}, {0x5, 0x8}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x3}, {0x6, 0xa}, {0x6, 0x8}, {0x6, 0x4}, {0x2, 0x3}, {0x3, 0x5}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x2}, {0x3, 0x2}, {0x7, 0x3}, {0x3, 0x8}, {0x3, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x3}, {0x2, 0xa}, {0x2, 0x2}, {0x3}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x8}, {0x7, 0x9}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x7}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x6, 0x3}, {0x1, 0x3}, {}, {0x4, 0x7}, {0x6, 0x3}, {0x5, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x7, 0x5}, {0x3}, {0x0, 0x9}, {}, {0x7, 0x9}, {0x6, 0x6}, {0x5, 0x9}, {0x6}, {0x3, 0x5}, {0x7, 0x1}, {0x7, 0x5}, {0x3, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x7}, {0x4, 0x8}, {0x3, 0x5}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x7, 0x6}]}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xe66fe7c55d655857, 0x1, 0x12, 0x1b, 0x18, 0x2, 0x1b, 0xc, 0x12, 0x0]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x10}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x0, 0x36, 0x9, 0x16, 0x30, 0x13, 0xc, 0x1b, 0x69, 0x2, 0xb, 0xc, 0x1b, 0xc, 0x6c, 0x24, 0xc, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x9, 0x30, 0xc, 0x60, 0xb, 0xb, 0x6, 0x69, 0x1b, 0x48, 0x36, 0x40d5e1fb639ff32c, 0x16, 0xc, 0x2, 0x9, 0x60, 0x12, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0xa}, {0x2, 0x1}, {0x4}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x7}, {0x3, 0x8}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x5}, {0x4, 0x7}, {0x5}, {0x2, 0x6}, {0x0, 0x5}, {0x6, 0x6}, {0x0, 0x7}, {}, {0x0, 0x6}, {0x3, 0x9}, {0x3, 0x1}, {0x4, 0x4}, {0x5, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0x7}, {0x2, 0x5}, {0x1, 0x6}, {0x2}, {0x0, 0x2}, {0x4}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x3}, {0x4, 0x1}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x8}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7fff, 0x9, 0x0, 0x9, 0x7cfa, 0xaf1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xfff, 0x9, 0x2, 0x8000, 0x8001, 0x92, 0x33]}}]}, @NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x7}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x3}, {0x1, 0x9}, {0x4, 0x9}, {0x4, 0xa}, {0x1}, {0x3, 0xa}, {0x5, 0x6}, {0x6}, {0x2, 0xa}, {0x0, 0x4}, {}, {}, {0x0, 0x6}, {0x0, 0xa}, {0x4, 0xa}, {0x7, 0x3}, {0x3}, {0x3, 0x5}, {0x6, 0x3}, {0x5, 0x2}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x7}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x2}, {0x6, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8000, 0x800, 0xf861, 0x1000, 0x7, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x1}, {0x2, 0x8}, {0x4, 0x2}, {0x7, 0x9}, {0x6, 0x3}, {0x6, 0x5}, {0x2, 0x9}, {0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x6, 0x3}, {0x5, 0x7}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x2}, {0x1, 0x8}, {}, {0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x6}, {0x3, 0x9}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x4, 0x9}, {0x0, 0x3}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x3, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x2, 0x2}, {0x6, 0x2}, {0x4, 0x9}, {0x0, 0x6}, {0x4}, {0x6, 0x7}, {0x4, 0x7}, {0x6, 0x7}, {0x2, 0x8}, {0x2, 0x7}, {0x3}, {0x4, 0x2}, {0x3, 0x1}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3ff, 0x5, 0x3, 0x9, 0x800, 0x2, 0x7c4c]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x9, 0x78d538d81d24444b, 0x18, 0x16, 0x18, 0x1, 0x48, 0x9, 0x60, 0x48, 0x36, 0xb, 0x1b, 0x5, 0x4, 0x4, 0x48, 0x6c, 0xc, 0x2, 0x6, 0x48, 0x6c, 0x5, 0x60, 0x12, 0x5, 0x1, 0x30, 0x1, 0x6]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x5}, {0x3, 0x1}, {0x2, 0x6}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x4}, {0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x4}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0xa}, {0x6, 0x6}, {0x0, 0x1}, {0x2, 0x8}, {0x3, 0x9}, {0x7, 0x1}, {0x5, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x3}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x4}, {0x6, 0x6}, {0x3, 0x4}, {0x6, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x7, 0x4}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x16, 0x81, 0x1, 0x0, 0x401, 0x1, 0x92dd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6c, 0x3, 0x25, 0x8001, 0x1, 0x400, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x2, 0x2, 0x9, 0x4b, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x1b, 0xb, 0x9, 0x60, 0x24, 0x2, 0x21, 0x18, 0x30, 0x5, 0x16, 0x16, 0x5, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x12, 0xc, 0x4, 0x1b, 0x36, 0x30, 0x3, 0x5, 0x36, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x9ec4490bbfde13b1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x3f, 0x372c, 0x5, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x30, 0x1b, 0x4, 0x18, 0xb, 0x2, 0x9, 0x1, 0x6c, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xbdc, 0xd796, 0x3f3, 0x0, 0x6, 0x6, 0x5e0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffd, 0x101, 0x3, 0x200, 0xff, 0x1f, 0x800]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x6}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0x1}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x7}, {0x3, 0x5}, {0x5, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x7}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x1}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x5, 0x7}, {0x3, 0x2}, {0x4, 0x9}, {0x2, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x4, 0xa}, {0x5, 0x9}, {0x2, 0xa}, {0x5, 0x3}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x1, 0x3, 0x36, 0x60, 0x4, 0x18, 0x9, 0xc, 0xc, 0x12, 0x9, 0x18, 0x48, 0x12, 0x16, 0x9, 0x1b, 0x1b, 0x6]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x3}, {0x2, 0xa}, {0x5, 0x7}, {0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x7, 0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x4}, {0x5, 0x5}, {0x7, 0x4}, {}, {0x4, 0x4}, {0x2, 0xa}, {0x4, 0xa}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x6, 0x36, 0x5, 0x18, 0x4, 0x16, 0xd, 0x16, 0x1, 0xc, 0x18, 0x12, 0x18, 0x2, 0x3, 0x12, 0xc, 0x12, 0x4, 0x5, 0x6c, 0x9, 0x24]}]}]}, @NL80211_ATTR_TX_RATES={0x310, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x81, 0x8, 0xfff, 0xf958, 0x8001, 0x6ce9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x4}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x7, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x4, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x1}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x5, 0x3}, {0x7, 0x4}, {0x2, 0x5}, {0x2, 0x4}, {0x5, 0x9}, {0x1, 0x2}, {0x7, 0x3}, {0x7, 0x8}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x4}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x8}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x6}, {0x5, 0xa}, {0x7, 0x5}, {0x2, 0x9}, {}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x6}, {}, {0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x7}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4417, 0x5, 0x9, 0x7, 0x8, 0x1f, 0x0, 0x7f]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x3}, {0x6, 0x4}, {0x1, 0x6}, {0x6, 0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0xa}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x5}, {0x2}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x3}, {0x6, 0x9}, {0x6, 0x7}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x7, 0x4}, {0x6, 0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x6}, {0x4, 0x9}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x7, 0x0, 0x5, 0x3, 0x1, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x9d5, 0xd6b, 0x2ec, 0x200, 0x0, 0xa28, 0x101]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x8}, {0x4, 0x5}, {0x6, 0x4}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x5, 0xa}, {0x3, 0x5}, {0x5, 0x9}, {0x2, 0x1d}, {0x6, 0x3}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0x4}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x9}, {0x1, 0x6}, {0x7, 0xa}, {0x4, 0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x6, 0x9}, {0x6, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x3}, {0x7, 0x9}, {0x3, 0x7}, {0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x5, 0xa}, {0x4, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0x3}, {}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x7}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0x3}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x8}, {0x4, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x5, 0x3, 0x3, 0x60, 0x4, 0x12, 0xb, 0x60, 0x30, 0x9, 0xc, 0xc, 0x2, 0x48, 0x18, 0x48, 0x30]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x876, 0x9, 0x7, 0x8, 0xd6fc, 0x4, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x7}, {0x5, 0x6}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x8001, 0x6, 0xc2bf, 0x860, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x30, 0x48, 0x1b, 0x6c, 0x2, 0x6c, 0x4, 0x0]}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x9, 0x2, 0x4, 0x60, 0x60, 0x6, 0x3, 0x6, 0x16, 0x3, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7, 0x2, 0x364, 0x2, 0x8, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x6, 0x4, 0x3, 0x7f, 0x3, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x0, 0x3, 0x1, 0xfff7, 0x0, 0x12]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xd4, 0x9, 0xdc0, 0x5, 0x6, 0x2, 0x6ef]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x7}, {0x6, 0x4}, {0x6, 0x3}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x3, 0x8}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x1}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x3, 0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x4, 0x8}, {0x7, 0x7}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x2}, {0x1}, {0x2}, {0x0, 0x2}, {0x0, 0x8}, {}, {0x7, 0x1}, {0x2, 0x7}, {0x4, 0x1}, {0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0x3}, {0x0, 0x9}, {0x7}, {0x1}, {0x0, 0x8}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1f, 0x2, 0x8, 0x8, 0xd6, 0x6]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x1, 0x6, 0x6, 0x12]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x8}, {0x1, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x0, 0x6, 0x2, 0x3, 0x9, 0x6c, 0x0, 0x60, 0x30, 0x48, 0x2, 0x14, 0x1, 0x1, 0x60, 0x24, 0xc, 0x16, 0x24, 0x5, 0x1b, 0x6, 0x1b, 0xc, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xcd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r7 = inotify_add_watch(r1, &(0x7f0000000e40)='./file0\x00', 0x10000814) inotify_rm_watch(r1, r7) 05:14:43 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5c5c3bba"}, 0x0, 0x0, @planes=0x0, 0x6}) 05:14:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x18}, 0x0) 05:14:43 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000000c0)={0xcd0, r4, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x16, 0x6, 0x5, 0x1, 0x16, 0x2, 0x12, 0x6, 0x12, 0x4, 0x1, 0x3, 0x6c, 0x18, 0x18, 0x24, 0x12]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x18, 0x16, 0x36, 0x60, 0xc, 0x12, 0x5]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7}, {0x3, 0x9}, {0x3, 0x5}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0x3}, {0x3, 0xa}, {0x5, 0x9}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0x9}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x5}, {0x4, 0x4}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x7}, {0x7, 0x7}, {0x2, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x3}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x7}, {0x2, 0x1a}, {0x2, 0x6}, {0x2, 0x5}, {0x3, 0x8}, {0x7, 0x9}, {0x1, 0x2}, {0x2, 0x5}, {0x4}, {0x3, 0x8}, {0x7, 0xa}, {0x2, 0x5}, {0x7, 0x9}, {0x6}, {0x0, 0x9}, {0x6}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {}, {0x3, 0x5}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x6, 0x3}, {0x3, 0x5}, {0x1, 0x2}, {}, {0x0, 0x8}, {0x4, 0x2}, {0x5, 0x3}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0xa}, {0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x5, 0x2}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x9}, {0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0x3}, {0x3}, {0x7}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x8}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0xa}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0x2}, {}, {0x5}, {0x4, 0x6}, {0x0, 0x1}, {0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x9}, {0x4, 0x2}, {0x6}, {0x5, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1}, {0x5, 0x6}, {0x3, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {0x6}, {0x2, 0xa}, {0x2, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x2, 0x8}, {0x2}, {0x0, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x6, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x4, 0x3}, {0x2}, {0x4, 0x1}, {0x1, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x1, 0x4}, {}, {0x0, 0x6}, {0x2, 0x6}, {0x7, 0x5}, {0x0, 0x8}, {0x5, 0x8}, {0x5, 0x8}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x8}, {0x2, 0x8}, {0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x7, 0xa}, {0x2, 0x1}, {0x4, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x328f3a4d1b68347b}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x7}, {0x3, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x6, 0x1}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x5, 0x24, 0x60, 0x12, 0x9, 0x1, 0x1, 0x4, 0x1, 0x3, 0x2, 0x30, 0x1, 0x6, 0x1, 0x6c, 0x6, 0x6c, 0x60, 0x4, 0x16, 0x2, 0x6c, 0x18, 0x12, 0x16, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x200, 0x19bd, 0x0, 0x1, 0x7, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0xa}, {0x2, 0xa}, {0x6, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81, 0xef, 0x9, 0x7839, 0x4, 0x7, 0xe57]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x2, 0x8}, {0x4}, {0x4, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x1, 0x9}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x8}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x4, 0x4}, {0x4, 0x7}, {0x6}, {0x5, 0x5}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0x5}, {0x2, 0x2}, {0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0x6}, {0x7}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x6, 0x3}, {0x6, 0xa}, {0x6, 0x1}, {0x3, 0x8}, {0x4, 0x6}, {0x3, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x8}, {0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x2, 0x3}, {0x6, 0x7}, {0x5, 0x3}, {0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x7, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x5, 0x7, 0x4, 0x9, 0xa1c, 0xfff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x974, 0xdb4, 0x4, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x16, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x2, 0x12, 0x24, 0x16, 0x18, 0x3, 0x48, 0x12, 0x60, 0xc, 0x4, 0x36, 0x12, 0x6c, 0x2, 0x24, 0x48, 0x4, 0x24, 0x24, 0x3, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x8}, {0x2, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x7}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x5, 0x7}, {0x2}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {0x2, 0x8}, {0x6, 0x5}, {0x2, 0x9}, {0x6, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0xe4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x6, 0xc, 0x9, 0x0, 0x4, 0x3, 0x4b, 0x6c, 0x4, 0x18, 0x6c, 0x24, 0x24, 0xc, 0x36]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x2}, {0x2, 0x7}, {0x2, 0x9}, {0x5, 0x9}, {0x3, 0x4}, {0x3, 0x9}, {0x5, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x5, 0x2}, {0x7, 0x4}, {0x0, 0x8}, {0x6, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0xa}, {0x7, 0x5}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x6, 0x9}, {0x6, 0x3}, {0x1}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x3, 0x8}, {0x4, 0x6}, {0x2, 0x9}, {0x5}, {0x7, 0x4}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x3}, {0x1}, {0x4, 0x6}, {0x6}, {0x6}, {0x3}, {0x5}, {0x7, 0x4}, {0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x8}, {0x2, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x6, 0x2, 0x48, 0x6c, 0x16, 0x30, 0x3, 0x3, 0x3, 0xb, 0x36, 0x6, 0x9, 0xb, 0x30, 0x30, 0x3, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff89, 0x4, 0x8, 0x1f, 0x3, 0x3f, 0x6]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x7}, {0x6, 0x1}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x2}, {0x6, 0x5}, {0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x3}, {0x4}, {0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x2, 0x7, 0xff5f, 0xd3b, 0x606e, 0x1]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x7ff, 0x3, 0x5, 0x8, 0x969d, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xf8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x66, 0x1f, 0x18, 0x1b, 0x6, 0x40, 0x60, 0x1b, 0x2c, 0x16, 0x16, 0x30, 0x9, 0x16, 0x6, 0x5, 0x36, 0x6, 0x6c, 0x57, 0xc, 0xc, 0x60, 0x9, 0x18, 0x12, 0xc, 0x2, 0x1, 0x36, 0x2, 0x1d]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x1}, {0x4, 0xa}, {0x3}, {0x7, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0x4}, {0x5, 0xa}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0xb, 0xb, 0x6c, 0x2, 0xc, 0x4, 0x3, 0xb, 0x18, 0x1b, 0x9, 0x60, 0x3, 0x36, 0x1b, 0xc, 0x1b, 0xb, 0x24, 0x1, 0x3, 0x5, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x2, 0x9782, 0x1000, 0xffff, 0x6, 0xb3b2]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x1}, {0x0, 0x7}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x4, 0x6}, {0x3, 0x4}, {0x7, 0x5}, {0x7, 0x4}, {0x5, 0x3}, {0x3, 0x1}, {}, {0x6, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x4}, {0x6, 0x9}, {0x2, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x5, 0x6}, {0x6, 0x7}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0xa}, {0x5, 0x8}, {0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4665, 0x3, 0x8, 0x4, 0x121, 0x7, 0x3f]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0xc, 0x3, 0x6c, 0x1, 0x0, 0x9, 0x9, 0xb, 0xb, 0x18, 0x60, 0x18, 0x36, 0x16, 0x9, 0x6c, 0x3, 0x6, 0x67, 0x18, 0x4, 0xc, 0x5, 0x44, 0x2, 0x30, 0x4, 0x9]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x7}, {0x1, 0x6}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x5}, {0x5, 0x5}, {0x5, 0x9}, {0x7, 0x9}, {0x6}, {0x6}, {0x1, 0x6}, {0x2}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x4}, {0x6, 0x7}, {0x3, 0x7}, {0x2, 0x8}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0x9}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x7}, {0x3, 0xa}, {0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0xa}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x4}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x4}, {0x5}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x1b}, {0x5, 0x4}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x3}, {0x4, 0x3}, {0x4, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfe01, 0xff, 0xfffb, 0xfffe, 0x4, 0xfff]}}]}]}, @NL80211_ATTR_TX_RATES={0x508, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x61, 0x18, 0x2, 0x1, 0x2, 0x3, 0x6, 0x30, 0x4, 0xc, 0x24, 0x48, 0x36, 0x2, 0x16, 0x1, 0x98b1ea3623d31383, 0x4, 0x60, 0x6c, 0x18, 0x5, 0x36, 0x3, 0x48, 0x36, 0x30, 0x1]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0xa}, {0x0, 0x2}, {0x5, 0x9}, {0x2, 0x9}, {0x7, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x12, 0x12, 0x4, 0x6, 0x2, 0x18, 0x18, 0x16, 0x24, 0x16, 0x30, 0x66, 0x3, 0x3, 0xb, 0xb, 0x2, 0x24, 0x30, 0x2, 0xb, 0x12, 0xa610ad853a0ef515, 0x5, 0x1b, 0x6c, 0x60, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x1}, {0x6, 0x5}, {0x3, 0x5}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0xa}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x1}, {0x2, 0x2}, {0x2}, {0x1, 0x5}, {0x1}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x4, 0x8}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x4, 0x6}, {0x2, 0x4}, {0x3}, {0x1, 0x5}, {0x7}, {0x1, 0x8}, {0x6, 0x3}, {0x7, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1b, 0x30, 0x30, 0x3, 0x3, 0x3, 0x1, 0x1b, 0x48]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x9, 0x3, 0x6c, 0x2, 0x12, 0x18, 0x9, 0x48, 0xb, 0x6, 0x66, 0x16, 0xb, 0x6, 0x30, 0x3, 0x6, 0x9, 0x16, 0x30, 0x16, 0x24, 0x2, 0x16]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x16, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x757a, 0x8, 0x0, 0x1, 0x4, 0x1000, 0x4, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0xb, 0xc, 0x16, 0x3, 0x12, 0x16, 0x36, 0x3, 0x48, 0x6c, 0x4, 0x18, 0x3, 0x18, 0x9, 0x4, 0x24, 0xc, 0x1b, 0x0, 0xb, 0x12, 0x6c, 0x1b, 0x3, 0x30, 0x3, 0xce1bbb4d77a511e0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x6, 0x3}, {0x1, 0x1}, {0x5, 0xa}, {0x2, 0x9}, {0x2}, {0x3, 0x7}, {0x3, 0x2}, {0x5, 0x8}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x3}, {0x6, 0xa}, {0x6, 0x8}, {0x6, 0x4}, {0x2, 0x3}, {0x3, 0x5}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x2}, {0x3, 0x2}, {0x7, 0x3}, {0x3, 0x8}, {0x3, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x3}, {0x2, 0xa}, {0x2, 0x2}, {0x3}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x8}, {0x7, 0x9}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x7}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x6, 0x3}, {0x1, 0x3}, {}, {0x4, 0x7}, {0x6, 0x3}, {0x5, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x7, 0x5}, {0x3}, {0x0, 0x9}, {}, {0x7, 0x9}, {0x6, 0x6}, {0x5, 0x9}, {0x6}, {0x3, 0x5}, {0x7, 0x1}, {0x7, 0x5}, {0x3, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x7}, {0x4, 0x8}, {0x3, 0x5}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x7, 0x6}]}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xe66fe7c55d655857, 0x1, 0x12, 0x1b, 0x18, 0x2, 0x1b, 0xc, 0x12, 0x0]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x10}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x0, 0x36, 0x9, 0x16, 0x30, 0x13, 0xc, 0x1b, 0x69, 0x2, 0xb, 0xc, 0x1b, 0xc, 0x6c, 0x24, 0xc, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x9, 0x30, 0xc, 0x60, 0xb, 0xb, 0x6, 0x69, 0x1b, 0x48, 0x36, 0x40d5e1fb639ff32c, 0x16, 0xc, 0x2, 0x9, 0x60, 0x12, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0xa}, {0x2, 0x1}, {0x4}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x7}, {0x3, 0x8}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x5}, {0x4, 0x7}, {0x5}, {0x2, 0x6}, {0x0, 0x5}, {0x6, 0x6}, {0x0, 0x7}, {}, {0x0, 0x6}, {0x3, 0x9}, {0x3, 0x1}, {0x4, 0x4}, {0x5, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0x7}, {0x2, 0x5}, {0x1, 0x6}, {0x2}, {0x0, 0x2}, {0x4}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x3}, {0x4, 0x1}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x8}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7fff, 0x9, 0x0, 0x9, 0x7cfa, 0xaf1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xfff, 0x9, 0x2, 0x8000, 0x8001, 0x92, 0x33]}}]}, @NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x7}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x3}, {0x1, 0x9}, {0x4, 0x9}, {0x4, 0xa}, {0x1}, {0x3, 0xa}, {0x5, 0x6}, {0x6}, {0x2, 0xa}, {0x0, 0x4}, {}, {}, {0x0, 0x6}, {0x0, 0xa}, {0x4, 0xa}, {0x7, 0x3}, {0x3}, {0x3, 0x5}, {0x6, 0x3}, {0x5, 0x2}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x7}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x2}, {0x6, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8000, 0x800, 0xf861, 0x1000, 0x7, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x1}, {0x2, 0x8}, {0x4, 0x2}, {0x7, 0x9}, {0x6, 0x3}, {0x6, 0x5}, {0x2, 0x9}, {0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x6, 0x3}, {0x5, 0x7}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x2}, {0x1, 0x8}, {}, {0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x6}, {0x3, 0x9}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x4, 0x9}, {0x0, 0x3}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x3, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x2, 0x2}, {0x6, 0x2}, {0x4, 0x9}, {0x0, 0x6}, {0x4}, {0x6, 0x7}, {0x4, 0x7}, {0x6, 0x7}, {0x2, 0x8}, {0x2, 0x7}, {0x3}, {0x4, 0x2}, {0x3, 0x1}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3ff, 0x5, 0x3, 0x9, 0x800, 0x2, 0x7c4c]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x9, 0x78d538d81d24444b, 0x18, 0x16, 0x18, 0x1, 0x48, 0x9, 0x60, 0x48, 0x36, 0xb, 0x1b, 0x5, 0x4, 0x4, 0x48, 0x6c, 0xc, 0x2, 0x6, 0x48, 0x6c, 0x5, 0x60, 0x12, 0x5, 0x1, 0x30, 0x1, 0x6]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x5}, {0x3, 0x1}, {0x2, 0x6}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x4}, {0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x4}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0xa}, {0x6, 0x6}, {0x0, 0x1}, {0x2, 0x8}, {0x3, 0x9}, {0x7, 0x1}, {0x5, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x3}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x4}, {0x6, 0x6}, {0x3, 0x4}, {0x6, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x7, 0x4}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x16, 0x81, 0x1, 0x0, 0x401, 0x1, 0x92dd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6c, 0x3, 0x25, 0x8001, 0x1, 0x400, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x2, 0x2, 0x9, 0x4b, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x1b, 0xb, 0x9, 0x60, 0x24, 0x2, 0x21, 0x18, 0x30, 0x5, 0x16, 0x16, 0x5, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x12, 0xc, 0x4, 0x1b, 0x36, 0x30, 0x3, 0x5, 0x36, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x9ec4490bbfde13b1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x3f, 0x372c, 0x5, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x30, 0x1b, 0x4, 0x18, 0xb, 0x2, 0x9, 0x1, 0x6c, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xbdc, 0xd796, 0x3f3, 0x0, 0x6, 0x6, 0x5e0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffd, 0x101, 0x3, 0x200, 0xff, 0x1f, 0x800]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x6}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0x1}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x7}, {0x3, 0x5}, {0x5, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x7}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x1}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x5, 0x7}, {0x3, 0x2}, {0x4, 0x9}, {0x2, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x4, 0xa}, {0x5, 0x9}, {0x2, 0xa}, {0x5, 0x3}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x1, 0x3, 0x36, 0x60, 0x4, 0x18, 0x9, 0xc, 0xc, 0x12, 0x9, 0x18, 0x48, 0x12, 0x16, 0x9, 0x1b, 0x1b, 0x6]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x3}, {0x2, 0xa}, {0x5, 0x7}, {0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x7, 0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x4}, {0x5, 0x5}, {0x7, 0x4}, {}, {0x4, 0x4}, {0x2, 0xa}, {0x4, 0xa}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x6, 0x36, 0x5, 0x18, 0x4, 0x16, 0xd, 0x16, 0x1, 0xc, 0x18, 0x12, 0x18, 0x2, 0x3, 0x12, 0xc, 0x12, 0x4, 0x5, 0x6c, 0x9, 0x24]}]}]}, @NL80211_ATTR_TX_RATES={0x310, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x81, 0x8, 0xfff, 0xf958, 0x8001, 0x6ce9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x4}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x7, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x4, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x1}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x5, 0x3}, {0x7, 0x4}, {0x2, 0x5}, {0x2, 0x4}, {0x5, 0x9}, {0x1, 0x2}, {0x7, 0x3}, {0x7, 0x8}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x4}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x8}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x6}, {0x5, 0xa}, {0x7, 0x5}, {0x2, 0x9}, {}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x6}, {}, {0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x7}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4417, 0x5, 0x9, 0x7, 0x8, 0x1f, 0x0, 0x7f]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x3}, {0x6, 0x4}, {0x1, 0x6}, {0x6, 0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0xa}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x5}, {0x2}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x3}, {0x6, 0x9}, {0x6, 0x7}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x7, 0x4}, {0x6, 0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x6}, {0x4, 0x9}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x7, 0x0, 0x5, 0x3, 0x1, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x9d5, 0xd6b, 0x2ec, 0x200, 0x0, 0xa28, 0x101]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x8}, {0x4, 0x5}, {0x6, 0x4}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x5, 0xa}, {0x3, 0x5}, {0x5, 0x9}, {0x2, 0x1d}, {0x6, 0x3}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0x4}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x9}, {0x1, 0x6}, {0x7, 0xa}, {0x4, 0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x6, 0x9}, {0x6, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x3}, {0x7, 0x9}, {0x3, 0x7}, {0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x5, 0xa}, {0x4, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0x3}, {}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x7}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0x3}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x8}, {0x4, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x5, 0x3, 0x3, 0x60, 0x4, 0x12, 0xb, 0x60, 0x30, 0x9, 0xc, 0xc, 0x2, 0x48, 0x18, 0x48, 0x30]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x876, 0x9, 0x7, 0x8, 0xd6fc, 0x4, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x7}, {0x5, 0x6}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x8001, 0x6, 0xc2bf, 0x860, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x30, 0x48, 0x1b, 0x6c, 0x2, 0x6c, 0x4, 0x0]}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x9, 0x2, 0x4, 0x60, 0x60, 0x6, 0x3, 0x6, 0x16, 0x3, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7, 0x2, 0x364, 0x2, 0x8, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x6, 0x4, 0x3, 0x7f, 0x3, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x0, 0x3, 0x1, 0xfff7, 0x0, 0x12]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xd4, 0x9, 0xdc0, 0x5, 0x6, 0x2, 0x6ef]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x7}, {0x6, 0x4}, {0x6, 0x3}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x3, 0x8}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x1}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x3, 0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x4, 0x8}, {0x7, 0x7}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x2}, {0x1}, {0x2}, {0x0, 0x2}, {0x0, 0x8}, {}, {0x7, 0x1}, {0x2, 0x7}, {0x4, 0x1}, {0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0x3}, {0x0, 0x9}, {0x7}, {0x1}, {0x0, 0x8}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1f, 0x2, 0x8, 0x8, 0xd6, 0x6]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x1, 0x6, 0x6, 0x12]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x8}, {0x1, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x0, 0x6, 0x2, 0x3, 0x9, 0x6c, 0x0, 0x60, 0x30, 0x48, 0x2, 0x14, 0x1, 0x1, 0x60, 0x24, 0xc, 0x16, 0x24, 0x5, 0x1b, 0x6, 0x1b, 0xc, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xcd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r7 = inotify_add_watch(r1, &(0x7f0000000e40)='./file0\x00', 0x10000814) inotify_rm_watch(r1, r7) 05:14:43 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0) 05:14:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000080"], 0x34}}, 0x0) 05:14:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0}, 0x2020) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x194, r4, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20000000, {0xffff, 0x4, 0x40, 0xfff7}}}, @NL80211_ATTR_FILS_KEK={0x28, 0xf2, "e568b2e42139a16a90abf0d0a3daa15b8680bf7a7f87341af89b1a775dada0bd4c95ade4"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x14, 0x49, [0xfac0d, 0xfac0c, 0xfac06, 0x0]}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x2}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac03, 0xfac04, 0xfac0d]}, @NL80211_ATTR_PMK={0x102, 0xfe, "3004559f7903231433c5fd13fe34fbe242fa149c044e879976ecd265677daca35a1fb30864f2e22c13d1f57a10fdc349a41bf27fda478fae125afc830802ff929d793598cb9a80a83882a8e01b7f0ff0f85e9b62f4dca5f662957b470401fe3830b7e5d716d4ec8a3bfe207b9dd894906bd8a291279e5c092e30871b438685039c0ced93581ac0985681f47f07676506b2eb07f65d0aa92d14c0b822ce12aa2378af61b260df810b90df4f09943ecbdf1b9e77f1c41f3aad8d687e59dee09e5425cfac8c4a36216290717739c2239b2249f57fbc53eb399b1f8ccbd501083286916d502fae46b9aa1162498cba8d6bb6e4c2b1f32937f7ce12de413b41b9"}]]}, 0x194}, 0x1, 0x0, 0x0, 0x51}, 0x8081) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r3, {0x9}}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x200, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc}}}}, 0x28}}, 0x0) 05:14:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x21}, 0x0) 05:14:43 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @default]}, 0x40) recvfrom$rose(r0, &(0x7f00000000c0)=""/53, 0x35, 0x22, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000180)={0x7, 0xb, 0x4, 0x100000, 0x7fffffff, {0x77359400}, {0x1, 0x2, 0x7, 0x3, 0x6, 0x1f, "44055b6b"}, 0x80000000, 0x4, @fd, 0x8001}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x10000, 0x0) 05:14:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:43 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000000c0)={0xcd0, r4, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x16, 0x6, 0x5, 0x1, 0x16, 0x2, 0x12, 0x6, 0x12, 0x4, 0x1, 0x3, 0x6c, 0x18, 0x18, 0x24, 0x12]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x18, 0x16, 0x36, 0x60, 0xc, 0x12, 0x5]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7}, {0x3, 0x9}, {0x3, 0x5}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0x3}, {0x3, 0xa}, {0x5, 0x9}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0x9}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x5}, {0x4, 0x4}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x7}, {0x7, 0x7}, {0x2, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x3}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x7}, {0x2, 0x1a}, {0x2, 0x6}, {0x2, 0x5}, {0x3, 0x8}, {0x7, 0x9}, {0x1, 0x2}, {0x2, 0x5}, {0x4}, {0x3, 0x8}, {0x7, 0xa}, {0x2, 0x5}, {0x7, 0x9}, {0x6}, {0x0, 0x9}, {0x6}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {}, {0x3, 0x5}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x6, 0x3}, {0x3, 0x5}, {0x1, 0x2}, {}, {0x0, 0x8}, {0x4, 0x2}, {0x5, 0x3}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0xa}, {0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x5, 0x2}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x9}, {0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0x3}, {0x3}, {0x7}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x8}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0xa}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0x2}, {}, {0x5}, {0x4, 0x6}, {0x0, 0x1}, {0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x9}, {0x4, 0x2}, {0x6}, {0x5, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1}, {0x5, 0x6}, {0x3, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {0x6}, {0x2, 0xa}, {0x2, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x2, 0x8}, {0x2}, {0x0, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x6, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x4, 0x3}, {0x2}, {0x4, 0x1}, {0x1, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x1, 0x4}, {}, {0x0, 0x6}, {0x2, 0x6}, {0x7, 0x5}, {0x0, 0x8}, {0x5, 0x8}, {0x5, 0x8}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x8}, {0x2, 0x8}, {0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x7, 0xa}, {0x2, 0x1}, {0x4, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x328f3a4d1b68347b}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x7}, {0x3, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x6, 0x1}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x5, 0x24, 0x60, 0x12, 0x9, 0x1, 0x1, 0x4, 0x1, 0x3, 0x2, 0x30, 0x1, 0x6, 0x1, 0x6c, 0x6, 0x6c, 0x60, 0x4, 0x16, 0x2, 0x6c, 0x18, 0x12, 0x16, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x200, 0x19bd, 0x0, 0x1, 0x7, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0xa}, {0x2, 0xa}, {0x6, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81, 0xef, 0x9, 0x7839, 0x4, 0x7, 0xe57]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x2, 0x8}, {0x4}, {0x4, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x1, 0x9}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x8}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x4, 0x4}, {0x4, 0x7}, {0x6}, {0x5, 0x5}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0x5}, {0x2, 0x2}, {0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0x6}, {0x7}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x6, 0x3}, {0x6, 0xa}, {0x6, 0x1}, {0x3, 0x8}, {0x4, 0x6}, {0x3, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x8}, {0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x2, 0x3}, {0x6, 0x7}, {0x5, 0x3}, {0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x7, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x5, 0x7, 0x4, 0x9, 0xa1c, 0xfff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x974, 0xdb4, 0x4, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x16, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x2, 0x12, 0x24, 0x16, 0x18, 0x3, 0x48, 0x12, 0x60, 0xc, 0x4, 0x36, 0x12, 0x6c, 0x2, 0x24, 0x48, 0x4, 0x24, 0x24, 0x3, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x8}, {0x2, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x7}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x5, 0x7}, {0x2}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {0x2, 0x8}, {0x6, 0x5}, {0x2, 0x9}, {0x6, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0xe4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x6, 0xc, 0x9, 0x0, 0x4, 0x3, 0x4b, 0x6c, 0x4, 0x18, 0x6c, 0x24, 0x24, 0xc, 0x36]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x2}, {0x2, 0x7}, {0x2, 0x9}, {0x5, 0x9}, {0x3, 0x4}, {0x3, 0x9}, {0x5, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x5, 0x2}, {0x7, 0x4}, {0x0, 0x8}, {0x6, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0xa}, {0x7, 0x5}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x6, 0x9}, {0x6, 0x3}, {0x1}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x3, 0x8}, {0x4, 0x6}, {0x2, 0x9}, {0x5}, {0x7, 0x4}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x3}, {0x1}, {0x4, 0x6}, {0x6}, {0x6}, {0x3}, {0x5}, {0x7, 0x4}, {0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x8}, {0x2, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x6, 0x2, 0x48, 0x6c, 0x16, 0x30, 0x3, 0x3, 0x3, 0xb, 0x36, 0x6, 0x9, 0xb, 0x30, 0x30, 0x3, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff89, 0x4, 0x8, 0x1f, 0x3, 0x3f, 0x6]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x7}, {0x6, 0x1}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x2}, {0x6, 0x5}, {0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x3}, {0x4}, {0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x2, 0x7, 0xff5f, 0xd3b, 0x606e, 0x1]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x7ff, 0x3, 0x5, 0x8, 0x969d, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xf8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x66, 0x1f, 0x18, 0x1b, 0x6, 0x40, 0x60, 0x1b, 0x2c, 0x16, 0x16, 0x30, 0x9, 0x16, 0x6, 0x5, 0x36, 0x6, 0x6c, 0x57, 0xc, 0xc, 0x60, 0x9, 0x18, 0x12, 0xc, 0x2, 0x1, 0x36, 0x2, 0x1d]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x1}, {0x4, 0xa}, {0x3}, {0x7, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0x4}, {0x5, 0xa}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0xb, 0xb, 0x6c, 0x2, 0xc, 0x4, 0x3, 0xb, 0x18, 0x1b, 0x9, 0x60, 0x3, 0x36, 0x1b, 0xc, 0x1b, 0xb, 0x24, 0x1, 0x3, 0x5, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x2, 0x9782, 0x1000, 0xffff, 0x6, 0xb3b2]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x1}, {0x0, 0x7}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x4, 0x6}, {0x3, 0x4}, {0x7, 0x5}, {0x7, 0x4}, {0x5, 0x3}, {0x3, 0x1}, {}, {0x6, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x4}, {0x6, 0x9}, {0x2, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x5, 0x6}, {0x6, 0x7}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0xa}, {0x5, 0x8}, {0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4665, 0x3, 0x8, 0x4, 0x121, 0x7, 0x3f]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0xc, 0x3, 0x6c, 0x1, 0x0, 0x9, 0x9, 0xb, 0xb, 0x18, 0x60, 0x18, 0x36, 0x16, 0x9, 0x6c, 0x3, 0x6, 0x67, 0x18, 0x4, 0xc, 0x5, 0x44, 0x2, 0x30, 0x4, 0x9]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x7}, {0x1, 0x6}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x5}, {0x5, 0x5}, {0x5, 0x9}, {0x7, 0x9}, {0x6}, {0x6}, {0x1, 0x6}, {0x2}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x4}, {0x6, 0x7}, {0x3, 0x7}, {0x2, 0x8}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0x9}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x7}, {0x3, 0xa}, {0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0xa}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x4}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x4}, {0x5}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x1b}, {0x5, 0x4}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x3}, {0x4, 0x3}, {0x4, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfe01, 0xff, 0xfffb, 0xfffe, 0x4, 0xfff]}}]}]}, @NL80211_ATTR_TX_RATES={0x508, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x61, 0x18, 0x2, 0x1, 0x2, 0x3, 0x6, 0x30, 0x4, 0xc, 0x24, 0x48, 0x36, 0x2, 0x16, 0x1, 0x98b1ea3623d31383, 0x4, 0x60, 0x6c, 0x18, 0x5, 0x36, 0x3, 0x48, 0x36, 0x30, 0x1]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0xa}, {0x0, 0x2}, {0x5, 0x9}, {0x2, 0x9}, {0x7, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x12, 0x12, 0x4, 0x6, 0x2, 0x18, 0x18, 0x16, 0x24, 0x16, 0x30, 0x66, 0x3, 0x3, 0xb, 0xb, 0x2, 0x24, 0x30, 0x2, 0xb, 0x12, 0xa610ad853a0ef515, 0x5, 0x1b, 0x6c, 0x60, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x1}, {0x6, 0x5}, {0x3, 0x5}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0xa}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x1}, {0x2, 0x2}, {0x2}, {0x1, 0x5}, {0x1}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x4, 0x8}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x4, 0x6}, {0x2, 0x4}, {0x3}, {0x1, 0x5}, {0x7}, {0x1, 0x8}, {0x6, 0x3}, {0x7, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1b, 0x30, 0x30, 0x3, 0x3, 0x3, 0x1, 0x1b, 0x48]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x9, 0x3, 0x6c, 0x2, 0x12, 0x18, 0x9, 0x48, 0xb, 0x6, 0x66, 0x16, 0xb, 0x6, 0x30, 0x3, 0x6, 0x9, 0x16, 0x30, 0x16, 0x24, 0x2, 0x16]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x16, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x757a, 0x8, 0x0, 0x1, 0x4, 0x1000, 0x4, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0xb, 0xc, 0x16, 0x3, 0x12, 0x16, 0x36, 0x3, 0x48, 0x6c, 0x4, 0x18, 0x3, 0x18, 0x9, 0x4, 0x24, 0xc, 0x1b, 0x0, 0xb, 0x12, 0x6c, 0x1b, 0x3, 0x30, 0x3, 0xce1bbb4d77a511e0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x6, 0x3}, {0x1, 0x1}, {0x5, 0xa}, {0x2, 0x9}, {0x2}, {0x3, 0x7}, {0x3, 0x2}, {0x5, 0x8}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x3}, {0x6, 0xa}, {0x6, 0x8}, {0x6, 0x4}, {0x2, 0x3}, {0x3, 0x5}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x2}, {0x3, 0x2}, {0x7, 0x3}, {0x3, 0x8}, {0x3, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x3}, {0x2, 0xa}, {0x2, 0x2}, {0x3}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x8}, {0x7, 0x9}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x7}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x6, 0x3}, {0x1, 0x3}, {}, {0x4, 0x7}, {0x6, 0x3}, {0x5, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x7, 0x5}, {0x3}, {0x0, 0x9}, {}, {0x7, 0x9}, {0x6, 0x6}, {0x5, 0x9}, {0x6}, {0x3, 0x5}, {0x7, 0x1}, {0x7, 0x5}, {0x3, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x7}, {0x4, 0x8}, {0x3, 0x5}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x7, 0x6}]}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xe66fe7c55d655857, 0x1, 0x12, 0x1b, 0x18, 0x2, 0x1b, 0xc, 0x12, 0x0]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x10}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x0, 0x36, 0x9, 0x16, 0x30, 0x13, 0xc, 0x1b, 0x69, 0x2, 0xb, 0xc, 0x1b, 0xc, 0x6c, 0x24, 0xc, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x9, 0x30, 0xc, 0x60, 0xb, 0xb, 0x6, 0x69, 0x1b, 0x48, 0x36, 0x40d5e1fb639ff32c, 0x16, 0xc, 0x2, 0x9, 0x60, 0x12, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0xa}, {0x2, 0x1}, {0x4}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x7}, {0x3, 0x8}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x5}, {0x4, 0x7}, {0x5}, {0x2, 0x6}, {0x0, 0x5}, {0x6, 0x6}, {0x0, 0x7}, {}, {0x0, 0x6}, {0x3, 0x9}, {0x3, 0x1}, {0x4, 0x4}, {0x5, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0x7}, {0x2, 0x5}, {0x1, 0x6}, {0x2}, {0x0, 0x2}, {0x4}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x3}, {0x4, 0x1}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x8}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7fff, 0x9, 0x0, 0x9, 0x7cfa, 0xaf1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xfff, 0x9, 0x2, 0x8000, 0x8001, 0x92, 0x33]}}]}, @NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x7}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x3}, {0x1, 0x9}, {0x4, 0x9}, {0x4, 0xa}, {0x1}, {0x3, 0xa}, {0x5, 0x6}, {0x6}, {0x2, 0xa}, {0x0, 0x4}, {}, {}, {0x0, 0x6}, {0x0, 0xa}, {0x4, 0xa}, {0x7, 0x3}, {0x3}, {0x3, 0x5}, {0x6, 0x3}, {0x5, 0x2}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x7}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x2}, {0x6, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8000, 0x800, 0xf861, 0x1000, 0x7, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x1}, {0x2, 0x8}, {0x4, 0x2}, {0x7, 0x9}, {0x6, 0x3}, {0x6, 0x5}, {0x2, 0x9}, {0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x6, 0x3}, {0x5, 0x7}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x2}, {0x1, 0x8}, {}, {0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x6}, {0x3, 0x9}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x4, 0x9}, {0x0, 0x3}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x3, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x2, 0x2}, {0x6, 0x2}, {0x4, 0x9}, {0x0, 0x6}, {0x4}, {0x6, 0x7}, {0x4, 0x7}, {0x6, 0x7}, {0x2, 0x8}, {0x2, 0x7}, {0x3}, {0x4, 0x2}, {0x3, 0x1}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3ff, 0x5, 0x3, 0x9, 0x800, 0x2, 0x7c4c]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x9, 0x78d538d81d24444b, 0x18, 0x16, 0x18, 0x1, 0x48, 0x9, 0x60, 0x48, 0x36, 0xb, 0x1b, 0x5, 0x4, 0x4, 0x48, 0x6c, 0xc, 0x2, 0x6, 0x48, 0x6c, 0x5, 0x60, 0x12, 0x5, 0x1, 0x30, 0x1, 0x6]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x5}, {0x3, 0x1}, {0x2, 0x6}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x4}, {0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x4}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0xa}, {0x6, 0x6}, {0x0, 0x1}, {0x2, 0x8}, {0x3, 0x9}, {0x7, 0x1}, {0x5, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x3}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x4}, {0x6, 0x6}, {0x3, 0x4}, {0x6, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x7, 0x4}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x16, 0x81, 0x1, 0x0, 0x401, 0x1, 0x92dd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6c, 0x3, 0x25, 0x8001, 0x1, 0x400, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x2, 0x2, 0x9, 0x4b, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x1b, 0xb, 0x9, 0x60, 0x24, 0x2, 0x21, 0x18, 0x30, 0x5, 0x16, 0x16, 0x5, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x12, 0xc, 0x4, 0x1b, 0x36, 0x30, 0x3, 0x5, 0x36, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x9ec4490bbfde13b1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x3f, 0x372c, 0x5, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x30, 0x1b, 0x4, 0x18, 0xb, 0x2, 0x9, 0x1, 0x6c, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xbdc, 0xd796, 0x3f3, 0x0, 0x6, 0x6, 0x5e0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffd, 0x101, 0x3, 0x200, 0xff, 0x1f, 0x800]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x6}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0x1}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x7}, {0x3, 0x5}, {0x5, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x7}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x1}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x5, 0x7}, {0x3, 0x2}, {0x4, 0x9}, {0x2, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x4, 0xa}, {0x5, 0x9}, {0x2, 0xa}, {0x5, 0x3}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x1, 0x3, 0x36, 0x60, 0x4, 0x18, 0x9, 0xc, 0xc, 0x12, 0x9, 0x18, 0x48, 0x12, 0x16, 0x9, 0x1b, 0x1b, 0x6]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x3}, {0x2, 0xa}, {0x5, 0x7}, {0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x7, 0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x4}, {0x5, 0x5}, {0x7, 0x4}, {}, {0x4, 0x4}, {0x2, 0xa}, {0x4, 0xa}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x6, 0x36, 0x5, 0x18, 0x4, 0x16, 0xd, 0x16, 0x1, 0xc, 0x18, 0x12, 0x18, 0x2, 0x3, 0x12, 0xc, 0x12, 0x4, 0x5, 0x6c, 0x9, 0x24]}]}]}, @NL80211_ATTR_TX_RATES={0x310, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x81, 0x8, 0xfff, 0xf958, 0x8001, 0x6ce9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x4}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x7, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x4, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x1}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x5, 0x3}, {0x7, 0x4}, {0x2, 0x5}, {0x2, 0x4}, {0x5, 0x9}, {0x1, 0x2}, {0x7, 0x3}, {0x7, 0x8}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x4}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x8}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x6}, {0x5, 0xa}, {0x7, 0x5}, {0x2, 0x9}, {}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x6}, {}, {0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x7}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4417, 0x5, 0x9, 0x7, 0x8, 0x1f, 0x0, 0x7f]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x3}, {0x6, 0x4}, {0x1, 0x6}, {0x6, 0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0xa}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x5}, {0x2}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x3}, {0x6, 0x9}, {0x6, 0x7}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x7, 0x4}, {0x6, 0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x6}, {0x4, 0x9}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x7, 0x0, 0x5, 0x3, 0x1, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x9d5, 0xd6b, 0x2ec, 0x200, 0x0, 0xa28, 0x101]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x8}, {0x4, 0x5}, {0x6, 0x4}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x5, 0xa}, {0x3, 0x5}, {0x5, 0x9}, {0x2, 0x1d}, {0x6, 0x3}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0x4}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x9}, {0x1, 0x6}, {0x7, 0xa}, {0x4, 0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x6, 0x9}, {0x6, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x3}, {0x7, 0x9}, {0x3, 0x7}, {0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x5, 0xa}, {0x4, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0x3}, {}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x7}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0x3}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x8}, {0x4, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x5, 0x3, 0x3, 0x60, 0x4, 0x12, 0xb, 0x60, 0x30, 0x9, 0xc, 0xc, 0x2, 0x48, 0x18, 0x48, 0x30]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x876, 0x9, 0x7, 0x8, 0xd6fc, 0x4, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x7}, {0x5, 0x6}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x8001, 0x6, 0xc2bf, 0x860, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x30, 0x48, 0x1b, 0x6c, 0x2, 0x6c, 0x4, 0x0]}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x9, 0x2, 0x4, 0x60, 0x60, 0x6, 0x3, 0x6, 0x16, 0x3, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7, 0x2, 0x364, 0x2, 0x8, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x6, 0x4, 0x3, 0x7f, 0x3, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x0, 0x3, 0x1, 0xfff7, 0x0, 0x12]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xd4, 0x9, 0xdc0, 0x5, 0x6, 0x2, 0x6ef]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x7}, {0x6, 0x4}, {0x6, 0x3}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x3, 0x8}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x1}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x3, 0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x4, 0x8}, {0x7, 0x7}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x2}, {0x1}, {0x2}, {0x0, 0x2}, {0x0, 0x8}, {}, {0x7, 0x1}, {0x2, 0x7}, {0x4, 0x1}, {0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0x3}, {0x0, 0x9}, {0x7}, {0x1}, {0x0, 0x8}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1f, 0x2, 0x8, 0x8, 0xd6, 0x6]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x1, 0x6, 0x6, 0x12]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x8}, {0x1, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x0, 0x6, 0x2, 0x3, 0x9, 0x6c, 0x0, 0x60, 0x30, 0x48, 0x2, 0x14, 0x1, 0x1, 0x60, 0x24, 0xc, 0x16, 0x24, 0x5, 0x1b, 0x6, 0x1b, 0xc, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xcd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) r7 = inotify_add_watch(r1, &(0x7f0000000e40)='./file0\x00', 0x10000814) inotify_rm_watch(r1, r7) 05:14:43 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000080)=@short={0xb, @dev, @netrom, 0x1, @rose}, &(0x7f0000000140)=0x1c, 0x80800) r2 = accept4$rose(r1, &(0x7f0000000040)=@full={0xb, @remote, @netrom, 0x0, [@netrom, @rose, @default, @remote, @null, @netrom]}, &(0x7f0000000100)=0x40, 0x1800) setsockopt$rose(r2, 0x104, 0x5, &(0x7f00000000c0)=0x9, 0x4) 05:14:43 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) bind$rose(r1, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 05:14:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x25}, 0x0) 05:14:44 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0xe100, 0x1f, {0x0, 0x2710}, {0x3, 0x2, 0xfa, 0x1f, 0x1, 0x2, "5c5c3bba"}, 0x3, 0x4, @planes=&(0x7f0000000080)={0xfffffffe, 0x80, @fd, 0x1467}, 0x6}) 05:14:44 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) getrusage(0xffffffffffffffff, &(0x7f0000000040)) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0xfffffffd}, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) 05:14:44 executing program 2: r0 = geteuid() syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x6, &(0x7f0000001400)=[{&(0x7f00000000c0)="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", 0x1000, 0x7}, {&(0x7f00000010c0)="c8961ef603402abde1b117cb31d57872d147102dfa7ec70ecb3a47f86e9d3fa11082f509285a000f28847961b4c4c289915515ff86814a87c09a1c8a0bba95e1b01a7a7daeea1eabbdf1f35d5701b14e92d48d04af6d3a98b9352bb9c9332882dd80db8fbff11e228bf669932a0b3b21d9fa2f0a7006829c2cea4e42853bc3e64d3bef1323d15021aa230b462dd4982f35f6b6232fef65f0dc1db4da45794428b4abf959d3d5e94932c923d7", 0xac, 0x29d}, {&(0x7f0000001180)="17f8bfdd514f5669a115bc8776ee34b0dcbfb9ec84863a5b62466ce0f4bb38c9e10530f20f9386e2af5bb624e52486dd825e5e013fdfeb244468b389e7e21b0ee0d4b8bf2a4b19dd00e8adb8859e1bd0112582a53fc38815c195984ab262", 0x5e, 0x6}, {&(0x7f0000001200)="b091d0b22ddf69ad7ec585f879be2ed73a8f8323", 0x14, 0x3}, {&(0x7f0000001240)="30bfd4302626c5a578d8b4077234c055d1297a288f4fd243f8572b7403c30754b3b69ac22f534ff9d7ae6058f7604bcfb2f5d95fa87be731ea26af914f9b3152a0ceed9380ec05b17b66e4b4370b38d07d62d924f18de7c6fcffa409dd8f99453eae66fcd4dbae1438e758da8bc08cfe1c388098cc26b0aece91e44c027f168d3311edf4200d4da4bb25ae", 0x8b}, {&(0x7f0000001300)="ea56c65772dee52dc48ddb7b5f3eb7d71581d50e89c6e70f869ac32d6b9ce6acb2c21d78e88a1ed33a4e933cb590b18f1490bd7af6e291476bbf1ae693633b9d83323e29439aa2ca14318f08ea7af62052524b357bdab20408beb0d3a35ab0373c848c2f966b4135a3ef36b7bf4534a88f5e7ba225a4607df3d9505308b83279a037d5a98097e576c8d2a049c739ea236d638430e636f0c0ed4a6a070431129468b18e6129c76ba9f57186f1df13dd7e302158171827d3faa8a49a78f53162c85266f434b0c83b0dbbfab4bd8c82573efdf5aefc487da8ac191f868b7ab8f1fb", 0xe0, 0x5}], 0x840000, &(0x7f00000014c0)={[{@umask={'umask', 0x3d, 0x8e}}, {@uid={'uid', 0x3d, r0}}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@umask={'umask', 0x3d, 0x4}}, {@session={'session', 0x3d, 0x578e}}], [{@dont_hash='dont_hash'}, {@fsname={'fsname', 0x3d, '+!('}}]}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000001580)={r1, 0x10000, 0x9, "5cfa7bd4819492e5af5f518b20c3b9c73ab00dd7d98590dd201fe4fc7ae89d845fe1294c17131246c6f8598913bc9442a492a9ce3e66c76a0c1307dabc6b61e88dea39cb82ee86807f922f4e71bc19d85e6dc9ac260d46a8cc880aa0ac19deff52c36d7d611f32dcf54b12a3ef4c77d78c9cad075be79a3c9648d85429740426f137f9798dbad929a0f0142d2f74125eacd2668d45813f40d4d3211de38ddf2d6e8bbecfada925b50ec4"}) 05:14:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000"], 0x34}}, 0x0) 05:14:44 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000000c0)={0xcd0, r4, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x16, 0x6, 0x5, 0x1, 0x16, 0x2, 0x12, 0x6, 0x12, 0x4, 0x1, 0x3, 0x6c, 0x18, 0x18, 0x24, 0x12]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x18, 0x16, 0x36, 0x60, 0xc, 0x12, 0x5]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x7}, {0x3, 0x9}, {0x3, 0x5}, {0x4, 0x9}, {0x1, 0x4}, {0x0, 0x2}, {0x2, 0x3}, {0x3, 0xa}, {0x5, 0x9}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0x9}, {0x4, 0x2}, {0x4, 0x2}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x3}, {0x2, 0x5}, {0x4, 0x4}, {0x1, 0x6}, {0x2, 0x3}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x7}, {0x7, 0x7}, {0x2, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x7, 0x3}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x1}, {0x0, 0x5}, {0x1, 0x9}, {0x0, 0x8}, {0x6, 0x7}, {0x2, 0x1a}, {0x2, 0x6}, {0x2, 0x5}, {0x3, 0x8}, {0x7, 0x9}, {0x1, 0x2}, {0x2, 0x5}, {0x4}, {0x3, 0x8}, {0x7, 0xa}, {0x2, 0x5}, {0x7, 0x9}, {0x6}, {0x0, 0x9}, {0x6}, {0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x7, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {}, {0x3, 0x5}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x2, 0x8}, {0x6, 0x3}, {0x3, 0x5}, {0x1, 0x2}, {}, {0x0, 0x8}, {0x4, 0x2}, {0x5, 0x3}, {0x4, 0x3}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0xa}, {0x3}, {0x1, 0x5}, {0x2, 0x1}, {0x5, 0x2}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x9}, {0x6}, {0x0, 0x7}, {0x6, 0x6}, {0x2, 0x3}, {0x3}, {0x7}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x4}, {0x6, 0x4}, {0x2, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x9}, {0x0, 0x7}, {0x5, 0xa}, {0x2, 0x8}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x0, 0xa}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x5}, {0x5, 0x5}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0x2}, {}, {0x5}, {0x4, 0x6}, {0x0, 0x1}, {0x2}, {0x7, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x5}, {0x0, 0x9}, {0x4, 0x2}, {0x6}, {0x5, 0x7}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1}, {0x5, 0x6}, {0x3, 0x5}, {0x5, 0x3}, {0x2, 0x9}, {0x6}, {0x2, 0xa}, {0x2, 0x3}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x8}, {0x3, 0x1}, {0x5, 0x2}, {0x1, 0x7}, {0x2, 0x8}, {0x2}, {0x0, 0x8}, {0x4, 0x2}, {0x6, 0x8}, {0x0, 0x4}, {0x6, 0x6}, {0x6, 0x2}, {0x2, 0x9}, {0x3, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x6, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x4, 0x3}, {0x2}, {0x4, 0x1}, {0x1, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x1, 0x9}, {0x1, 0x4}, {}, {0x0, 0x6}, {0x2, 0x6}, {0x7, 0x5}, {0x0, 0x8}, {0x5, 0x8}, {0x5, 0x8}, {0x5, 0x5}, {0x3, 0x1}, {0x1, 0x8}, {0x2, 0x8}, {0x3}, {0x7, 0xa}, {0x0, 0x9}, {0x7, 0xa}, {0x2, 0x1}, {0x4, 0x8}, {0x5, 0x2}, {0x0, 0x6}, {0x2, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x328f3a4d1b68347b}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x7}, {0x3, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x6, 0x1}]}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x5, 0x5, 0x24, 0x60, 0x12, 0x9, 0x1, 0x1, 0x4, 0x1, 0x3, 0x2, 0x30, 0x1, 0x6, 0x1, 0x6c, 0x6, 0x6c, 0x60, 0x4, 0x16, 0x2, 0x6c, 0x18, 0x12, 0x16, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x200, 0x19bd, 0x0, 0x1, 0x7, 0x1, 0x8]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0xa}, {0x2, 0xa}, {0x6, 0x1}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x81, 0xef, 0x9, 0x7839, 0x4, 0x7, 0xe57]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x16, 0x2, [{}, {0x5, 0xa}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x2, 0x8}, {0x4}, {0x4, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x1, 0x9}, {0x7, 0x9}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x2, 0x8}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x6}, {0x2, 0x6}, {0x4, 0x4}, {0x4, 0x7}, {0x6}, {0x5, 0x5}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0x5}, {0x2, 0x2}, {0x4}, {0x5, 0x6}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0x4}, {0x5, 0x6}, {0x7}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0x8}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x4}, {0x2}, {0x1, 0x2}, {0x2, 0x8}, {0x6, 0x3}, {0x6, 0xa}, {0x6, 0x1}, {0x3, 0x8}, {0x4, 0x6}, {0x3, 0x5}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x6}, {0x4, 0x5}, {0x0, 0x7}, {0x3, 0x4}, {0x0, 0x8}, {0x3}, {0x5, 0x6}, {0x0, 0x2}, {0x1}, {0x0, 0x5}, {0x0, 0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x2, 0x3}, {0x6, 0x7}, {0x5, 0x3}, {0x3}, {0x1, 0x8}, {0x2, 0x8}, {0x2, 0x8}, {0x7, 0x8}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x5, 0x7, 0x4, 0x9, 0xa1c, 0xfff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x1, 0x974, 0xdb4, 0x4, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x16, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x2, 0x12, 0x24, 0x16, 0x18, 0x3, 0x48, 0x12, 0x60, 0xc, 0x4, 0x36, 0x12, 0x6c, 0x2, 0x24, 0x48, 0x4, 0x24, 0x24, 0x3, 0x60, 0x30]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x8}, {0x2, 0x1}, {0x7, 0x2}, {0x3, 0x6}, {0x3, 0x8}, {0x4, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0x7}, {0x6, 0x7}, {0x7}, {0x5, 0xa}, {0x5, 0x7}, {0x6, 0x2}, {0x6, 0x4}, {0x5, 0x7}, {0x2}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x8}, {0x2, 0x8}, {0x6, 0x5}, {0x2, 0x9}, {0x6, 0x4}]}]}]}, @NL80211_ATTR_TX_RATES={0xe4, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x6, 0xc, 0x9, 0x0, 0x4, 0x3, 0x4b, 0x6c, 0x4, 0x18, 0x6c, 0x24, 0x24, 0xc, 0x36]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x2}, {0x2, 0x7}, {0x2, 0x9}, {0x5, 0x9}, {0x3, 0x4}, {0x3, 0x9}, {0x5, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x1, 0x5}, {0x5, 0x2}, {0x7, 0x4}, {0x0, 0x8}, {0x6, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x1, 0xa}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0xa}, {0x7, 0x5}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0xa}, {0x7, 0xa}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x6, 0x9}, {0x6, 0x3}, {0x1}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x5}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x3, 0x8}, {0x4, 0x6}, {0x2, 0x9}, {0x5}, {0x7, 0x4}, {0x2, 0x2}, {0x1, 0x7}, {0x4, 0x3}, {0x1}, {0x4, 0x6}, {0x6}, {0x6}, {0x3}, {0x5}, {0x7, 0x4}, {0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x2}, {0x7, 0x4}, {0x4, 0x5}, {0x1, 0x7}, {0x2, 0x8}, {0x2, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x6, 0x2, 0x48, 0x6c, 0x16, 0x30, 0x3, 0x3, 0x3, 0xb, 0x36, 0x6, 0x9, 0xb, 0x30, 0x30, 0x3, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff89, 0x4, 0x8, 0x1f, 0x3, 0x3f, 0x6]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x7}, {0x6, 0x1}, {0x7, 0x4}, {0x5, 0x7}, {0x5, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x6, 0x8}, {0x1, 0x2}, {0x3, 0x2}, {0x6, 0x5}, {0x4}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x3}, {0x4}, {0x4}, {0x0, 0x6}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x2, 0x7, 0xff5f, 0xd3b, 0x606e, 0x1]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x7ff, 0x3, 0x5, 0x8, 0x969d, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xf8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x66, 0x1f, 0x18, 0x1b, 0x6, 0x40, 0x60, 0x1b, 0x2c, 0x16, 0x16, 0x30, 0x9, 0x16, 0x6, 0x5, 0x36, 0x6, 0x6c, 0x57, 0xc, 0xc, 0x60, 0x9, 0x18, 0x12, 0xc, 0x2, 0x1, 0x36, 0x2, 0x1d]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x1}, {0x4, 0xa}, {0x3}, {0x7, 0x4}, {0x4, 0x2}, {0x0, 0x3}, {0x5, 0x4}, {0x5, 0x4}, {0x5, 0xa}, {0x1, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0xb, 0xb, 0x6c, 0x2, 0xc, 0x4, 0x3, 0xb, 0x18, 0x1b, 0x9, 0x60, 0x3, 0x36, 0x1b, 0xc, 0x1b, 0xb, 0x24, 0x1, 0x3, 0x5, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x6, 0x2, 0x9782, 0x1000, 0xffff, 0x6, 0xb3b2]}}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x7}, {0x6, 0xa}, {0x7, 0x1}, {0x1, 0x2}, {0x4, 0x9}, {0x5, 0x1}, {0x0, 0x7}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0x2}, {0x5, 0x8}, {0x1, 0x6}, {0x6, 0x1}, {0x1, 0x9}, {0x4, 0x6}, {0x0, 0x4}, {0x4, 0x6}, {0x4, 0x6}, {0x3, 0x4}, {0x7, 0x5}, {0x7, 0x4}, {0x5, 0x3}, {0x3, 0x1}, {}, {0x6, 0x1}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x4}, {0x6, 0x9}, {0x2, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x5, 0x7}, {0x5, 0x6}, {0x6, 0x7}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0xa}, {0x5, 0x8}, {0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x4665, 0x3, 0x8, 0x4, 0x121, 0x7, 0x3f]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0xc, 0x3, 0x6c, 0x1, 0x0, 0x9, 0x9, 0xb, 0xb, 0x18, 0x60, 0x18, 0x36, 0x16, 0x9, 0x6c, 0x3, 0x6, 0x67, 0x18, 0x4, 0xc, 0x5, 0x44, 0x2, 0x30, 0x4, 0x9]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x2, 0x7}, {0x1, 0x6}, {0x7, 0x7}, {0x7, 0x1}, {0x5, 0x5}, {0x5, 0x5}, {0x5, 0x9}, {0x7, 0x9}, {0x6}, {0x6}, {0x1, 0x6}, {0x2}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x2}, {0x3, 0x6}, {0x0, 0x1}, {0x5, 0x4}, {0x6, 0x7}, {0x3, 0x7}, {0x2, 0x8}, {0x7, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x4}, {0x7, 0x9}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{}, {0x2, 0x5}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0x9}, {0x6, 0x9}, {0x4, 0x3}, {0x1, 0x7}, {0x3, 0xa}, {0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x2, 0x3}, {0x4, 0x6}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0xa}, {0x4, 0x7}, {0x0, 0x7}, {0x2, 0x4}, {0x0, 0x5}, {0x2, 0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x3, 0x4}, {0x6, 0x7}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x4}, {0x5}, {0x1, 0x2}, {0x7, 0x6}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x2}, {0x6, 0x6}, {0x1, 0x6}, {0x5, 0x1b}, {0x5, 0x4}, {0x5, 0x2}, {0x6, 0x9}, {0x4, 0x1}, {0x3, 0x5}, {0x4, 0x9}, {0x5, 0x6}, {0x0, 0x4}, {0x6, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0x3}, {0x4, 0x3}, {0x4, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfe01, 0xff, 0xfffb, 0xfffe, 0x4, 0xfff]}}]}]}, @NL80211_ATTR_TX_RATES={0x508, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xfc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x18, 0x61, 0x18, 0x2, 0x1, 0x2, 0x3, 0x6, 0x30, 0x4, 0xc, 0x24, 0x48, 0x36, 0x2, 0x16, 0x1, 0x98b1ea3623d31383, 0x4, 0x60, 0x6c, 0x18, 0x5, 0x36, 0x3, 0x48, 0x36, 0x30, 0x1]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0xa}, {0x0, 0x2}, {0x5, 0x9}, {0x2, 0x9}, {0x7, 0x5}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x24, 0x12, 0x12, 0x4, 0x6, 0x2, 0x18, 0x18, 0x16, 0x24, 0x16, 0x30, 0x66, 0x3, 0x3, 0xb, 0xb, 0x2, 0x24, 0x30, 0x2, 0xb, 0x12, 0xa610ad853a0ef515, 0x5, 0x1b, 0x6c, 0x60, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x1}, {0x6, 0x5}, {0x3, 0x5}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0xa}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0xa}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x1}, {0x2, 0x2}, {0x2}, {0x1, 0x5}, {0x1}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0x3}, {0x1, 0x8}, {0x3, 0x9}, {0x7, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x0, 0x7}, {0x4, 0x5}, {0x3, 0x9}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0x1}, {0x4, 0x9}, {0x4, 0x8}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x1}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x5, 0x9}, {0x0, 0x6}, {0x2, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x2, 0xa}, {0x0, 0x5}, {0x4, 0x6}, {0x2, 0x4}, {0x3}, {0x1, 0x5}, {0x7}, {0x1, 0x8}, {0x6, 0x3}, {0x7, 0x4}, {0x6, 0x6}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1b, 0x30, 0x30, 0x3, 0x3, 0x3, 0x1, 0x1b, 0x48]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x9, 0x3, 0x6c, 0x2, 0x12, 0x18, 0x9, 0x48, 0xb, 0x6, 0x66, 0x16, 0xb, 0x6, 0x30, 0x3, 0x6, 0x9, 0x16, 0x30, 0x16, 0x24, 0x2, 0x16]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x30, 0x16, 0x3, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x757a, 0x8, 0x0, 0x1, 0x4, 0x1000, 0x4, 0x1000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xb0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0xb, 0xc, 0x16, 0x3, 0x12, 0x16, 0x36, 0x3, 0x48, 0x6c, 0x4, 0x18, 0x3, 0x18, 0x9, 0x4, 0x24, 0xc, 0x1b, 0x0, 0xb, 0x12, 0x6c, 0x1b, 0x3, 0x30, 0x3, 0xce1bbb4d77a511e0]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0xa}, {0x6, 0x4}, {0x1, 0x3}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x7}, {0x6, 0x3}, {0x1, 0x1}, {0x5, 0xa}, {0x2, 0x9}, {0x2}, {0x3, 0x7}, {0x3, 0x2}, {0x5, 0x8}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x5}, {0x6, 0x8}, {0x3, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x3}, {0x6, 0xa}, {0x6, 0x8}, {0x6, 0x4}, {0x2, 0x3}, {0x3, 0x5}, {0x7, 0x2}, {0x3, 0x7}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x1}, {0x2}, {0x3, 0x2}, {0x7, 0x3}, {0x3, 0x8}, {0x3, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x3}, {0x2, 0xa}, {0x2, 0x2}, {0x3}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x2}, {0x6, 0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x5, 0x9}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x2}, {0x3, 0x7}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x0, 0x8}, {0x7, 0x9}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x7}, {0x4, 0x8}, {0x2, 0x8}, {0x7, 0x4}, {0x6, 0x5}, {0x6, 0x3}, {0x1, 0x3}, {}, {0x4, 0x7}, {0x6, 0x3}, {0x5, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x6, 0xa}, {0x7, 0x5}, {0x3}, {0x0, 0x9}, {}, {0x7, 0x9}, {0x6, 0x6}, {0x5, 0x9}, {0x6}, {0x3, 0x5}, {0x7, 0x1}, {0x7, 0x5}, {0x3, 0x4}, {0x3, 0x5}, {0x0, 0x2}, {0x2, 0x1}, {0x0, 0x4}, {0x4, 0x7}, {0x4, 0x8}, {0x3, 0x5}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x9}, {0x5, 0x1}, {0x2, 0x5}, {0x7, 0x6}]}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0xe66fe7c55d655857, 0x1, 0x12, 0x1b, 0x18, 0x2, 0x1b, 0xc, 0x12, 0x0]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x10}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x0, 0x36, 0x9, 0x16, 0x30, 0x13, 0xc, 0x1b, 0x69, 0x2, 0xb, 0xc, 0x1b, 0xc, 0x6c, 0x24, 0xc, 0x12]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x9, 0x30, 0xc, 0x60, 0xb, 0xb, 0x6, 0x69, 0x1b, 0x48, 0x36, 0x40d5e1fb639ff32c, 0x16, 0xc, 0x2, 0x9, 0x60, 0x12, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x43, 0x2, [{}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0xa}, {0x2, 0x1}, {0x4}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x1, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x7}, {0x3, 0x8}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x5}, {0x4, 0x7}, {0x5}, {0x2, 0x6}, {0x0, 0x5}, {0x6, 0x6}, {0x0, 0x7}, {}, {0x0, 0x6}, {0x3, 0x9}, {0x3, 0x1}, {0x4, 0x4}, {0x5, 0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x7, 0x9}, {0x7, 0x7}, {0x2, 0x5}, {0x1, 0x6}, {0x2}, {0x0, 0x2}, {0x4}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x3}, {0x4, 0x1}, {0x0, 0x4}, {0x5, 0x9}, {0x2, 0x8}, {0x3, 0x3}, {0x0, 0x9}, {0x3, 0x3}, {0x0, 0x5}, {0x6, 0x8}, {0x3, 0x8}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7fff, 0x9, 0x0, 0x9, 0x7cfa, 0xaf1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0xfff, 0x9, 0x2, 0x8000, 0x8001, 0x92, 0x33]}}]}, @NL80211_BAND_60GHZ={0xf0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x7}, {0x6, 0xa}, {0x1, 0x4}, {0x6, 0x8}, {0x6, 0x1}, {0x2, 0x8}, {0x2, 0x7}, {0x0, 0x2}, {0x3}, {0x1, 0x9}, {0x4, 0x9}, {0x4, 0xa}, {0x1}, {0x3, 0xa}, {0x5, 0x6}, {0x6}, {0x2, 0xa}, {0x0, 0x4}, {}, {}, {0x0, 0x6}, {0x0, 0xa}, {0x4, 0xa}, {0x7, 0x3}, {0x3}, {0x3, 0x5}, {0x6, 0x3}, {0x5, 0x2}, {0x7, 0x6}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x3}, {0x2, 0x3}, {0x0, 0x5}, {0x1, 0x7}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x9}, {0x2}, {0x6, 0xa}, {0x1, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8000, 0x800, 0xf861, 0x1000, 0x7, 0x5, 0x8]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x3, 0x1}, {0x2, 0x8}, {0x4, 0x2}, {0x7, 0x9}, {0x6, 0x3}, {0x6, 0x5}, {0x2, 0x9}, {0x7}, {0x1, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x6, 0x3}, {0x5, 0x7}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x8}, {0x5, 0x2}, {0x1, 0x8}, {}, {0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x6}, {0x3, 0x9}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x4, 0x9}, {0x0, 0x3}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0xa}, {0x7, 0x7}, {0x5}, {0x3, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x2, 0x2}, {0x6, 0x2}, {0x4, 0x9}, {0x0, 0x6}, {0x4}, {0x6, 0x7}, {0x4, 0x7}, {0x6, 0x7}, {0x2, 0x8}, {0x2, 0x7}, {0x3}, {0x4, 0x2}, {0x3, 0x1}, {0x5, 0x8}, {0x1, 0xa}, {0x4, 0x3}, {0x2, 0x9}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x3ff, 0x5, 0x3, 0x9, 0x800, 0x2, 0x7c4c]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x3, 0x9, 0x78d538d81d24444b, 0x18, 0x16, 0x18, 0x1, 0x48, 0x9, 0x60, 0x48, 0x36, 0xb, 0x1b, 0x5, 0x4, 0x4, 0x48, 0x6c, 0xc, 0x2, 0x6, 0x48, 0x6c, 0x5, 0x60, 0x12, 0x5, 0x1, 0x30, 0x1, 0x6]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x0, 0x5}, {0x3, 0x1}, {0x2, 0x6}, {0x7, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x0, 0x9}, {0x6, 0x6}, {0x4}, {0x3}, {0x0, 0x3}, {0x2, 0x2}, {0x4}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0xa}, {0x6, 0x6}, {0x0, 0x1}, {0x2, 0x8}, {0x3, 0x9}, {0x7, 0x1}, {0x5, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0x7}, {0x6, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x3}, {0x2, 0x4}]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0x4}, {0x6, 0x6}, {0x3, 0x4}, {0x6, 0x3}, {0x4, 0x9}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0x8}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x8}, {0x7, 0x4}, {0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x16, 0x81, 0x1, 0x0, 0x401, 0x1, 0x92dd]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x6c, 0x3, 0x25, 0x8001, 0x1, 0x400, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x2, 0x2, 0x9, 0x4b, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xd8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x1b, 0xb, 0x9, 0x60, 0x24, 0x2, 0x21, 0x18, 0x30, 0x5, 0x16, 0x16, 0x5, 0x36, 0x12]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x12, 0xc, 0x4, 0x1b, 0x36, 0x30, 0x3, 0x5, 0x36, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x9ec4490bbfde13b1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x40, 0x3f, 0x372c, 0x5, 0x1, 0x2, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x5, 0x30, 0x1b, 0x4, 0x18, 0xb, 0x2, 0x9, 0x1, 0x6c, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xbdc, 0xd796, 0x3f3, 0x0, 0x6, 0x6, 0x5e0]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffd, 0x101, 0x3, 0x200, 0xff, 0x1f, 0x800]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x1, 0x6}, {0x5, 0x5}, {0x3, 0x1}, {0x0, 0x7}, {0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x5, 0x1}, {0x7, 0x9}, {0x6, 0x8}, {0x3, 0x7}, {0x3, 0x5}, {0x5, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x2, 0x8}, {0x1, 0x6}, {0x7, 0x7}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x5}, {0x6, 0x4}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0x8}, {0x2, 0x1}, {0x6, 0x7}, {0x1, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x4, 0x2}, {0x0, 0x1}, {0x4, 0x9}, {0x5, 0x7}, {0x3, 0x2}, {0x4, 0x9}, {0x2, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x3}, {0x4, 0xa}, {0x5, 0x9}, {0x2, 0xa}, {0x5, 0x3}, {0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1b, 0x1, 0x3, 0x36, 0x60, 0x4, 0x18, 0x9, 0xc, 0xc, 0x12, 0x9, 0x18, 0x48, 0x12, 0x16, 0x9, 0x1b, 0x1b, 0x6]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x3}, {0x2, 0xa}, {0x5, 0x7}, {0x1}, {0x2, 0x4}, {0x2, 0x6}, {0x7, 0x7}, {0x6, 0x1}, {0x1, 0x8}, {0x7, 0x3}, {0x6, 0x1}, {0x2, 0x2}, {0x7, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x2, 0x9}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x4}, {0x5, 0x5}, {0x7, 0x4}, {}, {0x4, 0x4}, {0x2, 0xa}, {0x4, 0xa}, {0x4, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x4, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x6, 0x36, 0x5, 0x18, 0x4, 0x16, 0xd, 0x16, 0x1, 0xc, 0x18, 0x12, 0x18, 0x2, 0x3, 0x12, 0xc, 0x12, 0x4, 0x5, 0x6c, 0x9, 0x24]}]}]}, @NL80211_ATTR_TX_RATES={0x310, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0x81, 0x8, 0xfff, 0xf958, 0x8001, 0x6ce9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x0, 0x4}, {0x3, 0x7}, {0x0, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x5, 0x5}, {0x7, 0xa}, {0x6, 0x9}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x8}, {0x2, 0x8}, {0x0, 0x8}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x4}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x9}, {0x4, 0xa}, {0x0, 0x7}, {0x5, 0xa}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x1}, {0x4, 0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x5, 0x3}, {0x7, 0x4}, {0x2, 0x5}, {0x2, 0x4}, {0x5, 0x9}, {0x1, 0x2}, {0x7, 0x3}, {0x7, 0x8}, {0x4, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x0, 0x6}, {0x6, 0x5}, {0x2, 0x8}, {0x5, 0x1}, {0x0, 0x4}, {0x3, 0xa}, {0x4}, {0x3, 0x5}, {0x0, 0x3}, {0x1, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x1, 0x3}, {0x6, 0x1}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x8}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x6}, {0x5, 0xa}, {0x7, 0x5}, {0x2, 0x9}, {}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0x6}, {}, {0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x1, 0x7}, {0x7, 0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x8}, {0x3, 0x6}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4417, 0x5, 0x9, 0x7, 0x8, 0x1f, 0x0, 0x7f]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0x3}, {0x6, 0x4}, {0x1, 0x6}, {0x6, 0x3}, {0x3, 0x9}, {0x4, 0x4}, {0x5, 0x6}, {0x3, 0x4}, {0x0, 0x5}, {0x2, 0x7}, {0x5, 0xa}, {0x2, 0x4}, {0x1, 0x3}, {0x0, 0x1}, {0x5}, {0x2}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0x3}, {0x6, 0x9}, {0x6, 0x7}, {0x1, 0x5}, {0x6, 0x7}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {0x1, 0x2}, {0x6, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x7, 0x4}, {0x6, 0x2}, {0x4, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0x5}, {0x7, 0x6}, {0x4, 0x9}]}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0x7, 0x0, 0x5, 0x3, 0x1, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x9d5, 0xd6b, 0x2ec, 0x200, 0x0, 0xa28, 0x101]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x4, 0x8}, {0x4, 0x5}, {0x6, 0x4}, {0x3, 0x9}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0x7}, {0x6, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x5, 0xa}, {0x3, 0x5}, {0x5, 0x9}, {0x2, 0x1d}, {0x6, 0x3}, {0x4, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x3, 0x4}, {0x5, 0x2}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x9}, {0x1, 0x6}, {0x7, 0xa}, {0x4, 0x7}, {0x4, 0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x6, 0x9}, {0x6, 0x1}, {0x2, 0x7}, {0x0, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x3}, {0x7, 0x9}, {0x3, 0x7}, {0x5}, {0x7, 0x7}, {0x1, 0x8}, {0x5, 0x2}, {0x0, 0x7}, {0x4, 0x4}, {0x5, 0xa}, {0x4, 0x6}, {0x1, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x4, 0x3}, {}, {0x1, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x5, 0x1}, {0x7}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0x3}, {0x5, 0x4}, {0x5, 0x5}, {0x5, 0x8}, {0x4, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x4, 0x5, 0x3, 0x3, 0x60, 0x4, 0x12, 0xb, 0x60, 0x30, 0x9, 0xc, 0xc, 0x2, 0x48, 0x18, 0x48, 0x30]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x876, 0x9, 0x7, 0x8, 0xd6fc, 0x4, 0x5, 0x4]}}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x6, 0x7}, {0x5, 0x6}, {0x5, 0x6}, {0x4, 0x2}, {0x1, 0x7}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x1, 0x8001, 0x6, 0xc2bf, 0x860, 0x0, 0x9]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0x30, 0x48, 0x1b, 0x6c, 0x2, 0x6c, 0x4, 0x0]}]}, @NL80211_BAND_5GHZ={0xd0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x48, 0x9, 0x2, 0x4, 0x60, 0x60, 0x6, 0x3, 0x6, 0x16, 0x3, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x7, 0x2, 0x364, 0x2, 0x8, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x6, 0x4, 0x3, 0x7f, 0x3, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x0, 0x3, 0x1, 0xfff7, 0x0, 0x12]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xd4, 0x9, 0xdc0, 0x5, 0x6, 0x2, 0x6ef]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x7}, {0x6, 0x4}, {0x6, 0x3}, {0x3, 0x6}, {0x7, 0x7}, {0x5, 0x4}, {0x1, 0x3}, {0x3, 0x8}, {0x2, 0x4}, {0x5, 0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x2}, {0x6, 0x2}, {0x7, 0x1}, {0x5, 0x6}, {0x6, 0xa}, {0x7, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x3, 0x1}, {0x2, 0x3}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0x5}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x5}, {0x4, 0x8}, {0x7, 0x7}, {0x1, 0x9}, {0x5, 0x9}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x3, 0x2}, {0x0, 0x2}, {0x1, 0x5}, {0x0, 0x6}, {0x5, 0x6}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x2}, {0x1}, {0x2}, {0x0, 0x2}, {0x0, 0x8}, {}, {0x7, 0x1}, {0x2, 0x7}, {0x4, 0x1}, {0x6}, {0x2, 0x8}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x6}, {0x4, 0x3}, {0x0, 0x9}, {0x7}, {0x1}, {0x0, 0x8}, {0x2, 0x2}, {0x6, 0x1}, {0x2, 0x1}, {}, {0x1, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x1f, 0x2, 0x8, 0x8, 0xd6, 0x6]}}]}, @NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x1, 0x6, 0x6, 0x12]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x5, 0x8}, {0x1, 0x4}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x48, 0x0, 0x6, 0x2, 0x3, 0x9, 0x6c, 0x0, 0x60, 0x30, 0x48, 0x2, 0x14, 0x1, 0x1, 0x60, 0x24, 0xc, 0x16, 0x24, 0x5, 0x1b, 0x6, 0x1b, 0xc, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0xcd0}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) inotify_rm_watch(r1, 0x0) 05:14:44 executing program 3: r0 = geteuid() syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x6, &(0x7f0000001400)=[{&(0x7f00000000c0)="b7cd87de6d1fba52884c9c190ce966b7ca2e5ae4ef162c6de9bccd0a95e13fe14d35833a4e26891fba9b0707c06a55612dc30bd415566b2b2667d9dae37eb5222706b30b075f1b7a21dab67b1edc49e4de7f813dd192ded53640502f8c3d23830b42c60af2f416ad297d37cd62583bac02ee2fea6c62c4b36699d72eb05ac8957d5352abc7a9e9bbd616bc77d51d84335695173814727c83e9319d286e0ed87debaec9e098dbc3b969c92bb4e433c97412275320fa4cd8297af28018640853b2e1b376b8ba2b5e83fb80cf0697dd677f4502048c6bebce76c66590bd797f06c067c357b84c5e24e1df2d86062ae7fb86696aaaac0f836a83e5e040c86b6754b0080055ef0b0affec7e01547743acaa1d8197556e36496c21b2344c2926405405a1d7b2ff7e28d61bb35e8c4a6cec88506af418d94613ef395cef7388c798b1fc9ab854c36decda0df6a206a904ee673a7e689906c8d4a8dd28fd3edea1d75c2729f91441ffee6c51dd56a162e7da1584694f765aeb58e499df3e4c9d390d483151199cbd784e4aa95d687ddc3a4c7bf483af8572866302af5d609f5c2b359027d26b9d0d5a056716d0b0d177cab7e05afcfea6b99ba977f5b9811bd7abcf972f661eab4a8e11c7f066b57f4ececb1ade213db618c41ecfd489558074635e748be2610558b72d02a1458d82add3b3d8bfa8db9d09496432a506955dcbd2e5e174e92feee4e2fef9a03278b66268d5d382a8c06bda765b029f910ef171c2ddbeaacc6a679ac261e55ac8bb3a5a2e324622af10a7df8216d84487a9c1f4a721ae27d2d310b8df9ec3af6571b1a2b7eef44b399e7f2ebd594f9bdbc21e336ba2b31f07054606258326302ac4164bc7078f275584de03582c5b550daa61364327bc63baed8ac58074789e35e6450d088f6e76f45dedb214e47971103643605bef6ea2fb36ba8dd1a2de248913dbbe39751a6fa754a96fa039db9e5620df5eb4ee3beb9dc30998adb257a073f04f7d30e67c9a1e960818ac53c52e893de430a89760983273e87dc1addaa5eb45cc5692e891ca20fa9919ca34b1ecd3e3b6f0bcab31c36d71bc35e40d1d9b6f314a42ff9c59f39b3c50e831ba277392b3911b6abb87b4361f792505d4dffd1f6115894e2a5c03acd0f6d28590d7acbf5978b3d934f2ade506c8f43ea7f8b7710eafecdba3a817917c80203c4a22a98fa53a1c0a0c9efc4b8f8e8a39bc45ce9c303961df15c035b65d737d5092a4d96576ee3d8b1c0c31fe08845d2c2e470fb49af5cd23cc782658d2c6d1d870add48ea86f0da5ba8b082e49205b9eeff1701317df474fc32aec0b943c8361797f0621c8f27c95959d4369bb95a95e0d8ab8f4f783c739c973a53b131df5f1924c36dfc08e898b7817ceb4ba548066f7fd2296061a1e7c238ce447b8e66ee0c45d38058aa1f88b22106435be07f41e314a819ca55a81a89d062ec2132b58df5b02d61d8a09f51297cbc0114786defaf8aa8e2812015fe6859aa8f1ec373d44d4a86853a0d579e7c2b53f65b129ae0088321d3942074b67b2f39b8983101258714cfe4dcfda81d1bd1891468061621f35ea55214608a3f1dd8f46bdb66904e53b5cd7dd8ea1fc3f9ec08c9f1df836de36ec6d949fd01c6fd23ebc41a5e706740472ceb8768e9defd1f34afa698ba66f9c1f13463f4b26fc9905c5a7ad78deb4ee8acd32314a4aea02e232f2519b620688aaa9cb3813b98425bdf3c748bfedd5b9629863552ec6eff52c2d92c6d99e6a6931811d25cd9618faef0c2ba16c6865e0690e58d967760eeac5871a0245b811bfe8e74be148da6ea592b8b8df2ea82efacfa0a27c030e6fe388a3f1ccacd90a37fc76c76c0739db8e31ea57195f3332c02634cb0c42a9f7471dcc1cd96af9eb1f7a93ae20f66861788dd639ffcaf3e2b1740600f033c3f79976600d46b8f41f760cbb309811da1d2bb0b4ce9769921c46a97d08b261725e7992c56636dc6ed9c4397c38f217f0269ca16c5d96ef7dc7b6e2acc70c53aa51628024c2099a26ad6cbce4dd67626a4098e985c77a89c8f09145aeb8815c55339a9651543538b19afabc26fe6c932a60aa38989066cfebf4ab62101fb9759fd59156bbfb4ca6eb1c1dc9173259235193671c84005898b20e183ebf2a8d327250a4031d564cfc0b5857507c253821b63939d7d01b5785a73290c509af3d5ede700be9fc744e898cb5b8b3c39825433cd8e388c4b70ec19d6b576ddb3655f592b2f35ce6a4ab9ac62b2fe2bd3be62bbecd832c658402484bbd4857801e4f18828a72ddc39541f3e9242d3210ab5b72db60fdc73974389e9850224c2a46398d2371e9ecc2fb5576648ac7d4d18f091248f8f92284b29e742043812d8d1d0e6bffb3dbdb061d8644f006fad31ceece58bb5c45fd09a7d21bf397fa6b09b3b7e9342759292f0628dda8fddbe666f5c0244e33c2e15308be3a1dedf7d19ab59f68d3c82036d7b5889cad22e019f7b0efd6e571144d9761e2521aef8feb818dc1f6122387b216ed8bff074e2e2b85ff75b32e0c5669aacbce2ab1f9e22483ad6f830bb91b6bc922b7ba8b30dc399041c2f7e2042dfeb144333b5e4618501619c6ec333105111b8b91ad2b069dd88b0003eb0e8da1ff8887111400a6943d3a97a25c3aa9930a4768cabb590aa52fa262672a86281d2a95a2c3e922e4f4cdd58dae69e1bfe9a1b8052011a8cf4c9813964d7269b2a3d343dc5b89a824b1fca0ded2b3099016c63f5d1d975f3fbe15dbad1476cd7740b11505e87927a17a00d40d22924f54d3a50a4f60c73a69a4b69ba1c591065fd80df8c770baf9efa659ef19563383c8c6874789e42d13e227740a8ccd908f6f698c946da5066463048de004049a2747f13810a1fb090087ab74c9e9f02c37aa0c0c79917753f09993dce4065bcbe6c9a2a7bee00380c5abb60922f0419ae3b5f1b4fb2ff1a2ae3792ed594ab761cd735ae9f9fdea1f587b0f2f83703c177f9b4d8a11742343bc43445c031833763cb290bf56d4841c6d57f6116273b85996738163269eed71edead0afdfe0c0459b9212199fe32b509fda97b765fad1ea42c548ae59c7c7be7c003d28cf698ce0255d0e8978ef7721b5d7066e37870a91808dbc7b4b41a66854a8973f342bc596014055034756f9d29e54d48bab2f7ffef24d1b0d1a42eef9185db6cefcd42fe803f04b9b094e3dd445c1c478e8f82c9f2c7cea4a3ae5fe0570950fb49118f8cc446a4b70aa1ab2950c5e36217cae5dbff76c45fae0e3bcefa1fbf2b52880d3245490d43c13a16e2051cb80fad2a42aaaffa8aaf5af7c1b216ebc7d50bec258146204ecc96a84cc9ec58f508a9d49209dd2e1c1f24adc50050ee86791bc45664f3a064d64779d732b91ea6fca5c79cc6282931b3a8b25fe35164f7b7abed2f6c313b2df4b86dd5979a1ca2460f1a2d8a34ac990c35ed21f8a97b72baed02ce6041c47d66339ea74f3c51ad8c828d3559a6dc75d9711890477c749154105d9e4443b139703e415fc0073fad83aa19b564cbf1e6beaa60a401bb69221a918599961bedcefd4123b5496c864f5c9654a47999ba6c48f7764d8e5f9f6bd6457bbac362f424329a8577d5d452faaea61a58fc644841c60769394d937865e0b2e9e40ac13ca12504a40aaf75845b18d57ed12d9832c9dcd03835b670ff8246f1428d8ae72c530f27f94a92e03953187dd8b52e883cc9180360f8a3002ca1d308ea1e348e4c31ad19346e6518cba5c317bac719ef94613c6f5eff163c425c753d0b844b32b253ad91a8ea6c3e1cc589e6a006cda790566db7a788007b034b77daaa803a517a4b28ac148f17706a7e6af1e0d44659f6ad1e7d75d2e30370a77dce15c4a924dfd86b36b96a671cebe5a78b5bd337ab8bc77bea2d186eaea43a9b71a62e1f1ded1380acdd25bdff64d4a87a3e944db26068a499bdaf9d196068cc533f12b6cf6aa303c7eee858dbd0064f4ec614c2cc3ebbe8e6b4ebfd106dc6ede16263c9006998863b77065332d0b11093aad9c33fa2fd72c933839c2540e14ae6186d615cacfc7a61b4058a029d3700d6840c8042b5c106bd77d991ac41349c2a0d5589652cf3c3b9be8a5968e39eb99dfeb61dab42abefab45035874c7e6f84b14ed0c52ece822667630f432f451f99f7fb62445bd61aea5636b014805e1d1760c314cfde65ced05f4717469701be55c6cb45d686d997fd67114e00606e38a3f4855c7f6cedce49854b88bf1ba6d4d355adbecc25693811d86accbcc14a38194aab81462c9707fd9cfb4b27b40fa39a59f2062bba6f9596dced5df29622fc1bb38aed6123fd6ac43310cdbeeb6fcfb598888c9834534141c583654cd6d34269ced0a688405befa2a3684f32ccde16107a6c73fcaf71832e6ef78c1cc64fb52a63d40f5a10ea03ea67e7cf02274ad879f9a92071bc8e5e3f0bf3265196e638c7c91477f7476e86b8c254dbdf496ffeaa682f9c9c1b6f30b3cf30c2dd1ded4419371f9875a5c77b093a5f488eccfe0bc772c42854f2cc9c86a9c3cb1f3b54b433c2d0a9d50a8cc89a7eff64b3aab1e5faa3b3ab989b6fe505e0e9771910b4314df7aa132a9aa0aa2b434d62dababc9fb450652356c67fb3c43976af4de4e2f9a48b9a60eaf1604253a07e2dad891ae8a319b785fa4c937282761c03fc5c6b8c4e435d981ed06dfa56dfce65639a7dd11a28f8ef8dccf4e44221614104c8624bb012e21ad996ba06acd76bf4340b314bf727024a5e44b81991742a523a76759531725b5e52cee77c5101cad6826a10d75913a8b035619b339fc461b86608b4100b6b2416161beccadd2d9081e352fbdb252916413ae305fdf2078226e1bcb74e14d1a5c0a235a4d3e7233563efe82ef67ec7d45393a47cf40e4273229d9ce0ac6d4d49d9f223ba73b8c60264f4f3ac621d748ad4d5321af7a017181929c7f47486d0fb4afe67d8ab81ee867f0652fb4d10395884c855599a5f7c79d5ae582a415102212a522449a51b2748b9df92047bf1a0eedebcc10c4a99895093ae0ba63149662e8663601a63d1c98d629bfd1ac0531989341ef7676a61682dcec5d1d320c59f84775c7a9a3e6a8daa215cab9c35a15dd1af4042cfccdf17a427b67f444a96a3a94976f64cb6b58cbf5206491a10ef24798719c2637e593e5ebd6da5662c8be30109d332cb5f66b0921fa3d6d76aa894f7bd4a695d2e906093dd57b69464aaf5cf9e8195d2a8a05a56b5f2bfd2c8c88145a16f14b8d241dfaf51293f9e595a52d62f637da8675cf512764ae8755aa5166dba968182f97eacec53fbdb2c742b31eb821b43b8d2baf5f2f76298c59fddb56d97666d978b7ab1b0639cf396158530d2cd2a8fd063d5bec507a1ad64f1b4152a751c1fc0cf4fdff368f53347383dc149c4e9498aa6c898ee043d60f1a1d5fd12c622d3461f44ba41a6734f2e68b7fd2db3cebfa193aeafca0889827187702ac3da3ddb2e5f77e03df7063ea441c13bbebba1a085226c5e4451b0d067e7644e29a4950968cf2cd290bbae72d568544cbc975786bcba5d27a4c157ea76815483d38fd5c8170e81c8f197e80522887c8bafd15304700a06fb55c7e889028c8cad3f2de339af631ccbad912b6855043b24df976f57900ad40cb532bc3a16f76c03030c90ffb0482cbdae797efef880c5ca2c84d6824b5f260f2dd0a5f6b7519d427226652140aada3c1cd3b31ae6da7182750fcd0a407faeaf15a04ccbea15dc5a836572a783dea649e062a4825ad13ffdef1d99d692799551", 0x1000, 0x7}, {&(0x7f00000010c0)="c8961ef603402abde1b117cb31d57872d147102dfa7ec70ecb3a47f86e9d3fa11082f509285a000f28847961b4c4c289915515ff86814a87c09a1c8a0bba95e1b01a7a7daeea1eabbdf1f35d5701b14e92d48d04af6d3a98b9352bb9c9332882dd80db8fbff11e228bf669932a0b3b21d9fa2f0a7006829c2cea4e42853bc3e64d3bef1323d15021aa230b462dd4982f35f6b6232fef65f0dc1db4da45794428b4abf959d3d5e94932c923d7", 0xac, 0x29d}, {&(0x7f0000001180)="17f8bfdd514f5669a115bc8776ee34b0dcbfb9ec84863a5b62466ce0f4bb38c9e10530f20f9386e2af5bb624e52486dd825e5e013fdfeb244468b389e7e21b0ee0d4b8bf2a4b19dd00e8adb8859e1bd0112582a53fc38815c195984ab262", 0x5e, 0x6}, {&(0x7f0000001200)="b091d0b22ddf69ad7ec585f879be2ed73a8f8323", 0x14, 0x3}, {&(0x7f0000001240)="30bfd4302626c5a578d8b4077234c055d1297a288f4fd243f8572b7403c30754b3b69ac22f534ff9d7ae6058f7604bcfb2f5d95fa87be731ea26af914f9b3152a0ceed9380ec05b17b66e4b4370b38d07d62d924f18de7c6fcffa409dd8f99453eae66fcd4dbae1438e758da8bc08cfe1c388098cc26b0aece91e44c027f168d3311edf4200d4da4bb25ae", 0x8b}, {&(0x7f0000001300)="ea56c65772dee52dc48ddb7b5f3eb7d71581d50e89c6e70f869ac32d6b9ce6acb2c21d78e88a1ed33a4e933cb590b18f1490bd7af6e291476bbf1ae693633b9d83323e29439aa2ca14318f08ea7af62052524b357bdab20408beb0d3a35ab0373c848c2f966b4135a3ef36b7bf4534a88f5e7ba225a4607df3d9505308b83279a037d5a98097e576c8d2a049c739ea236d638430e636f0c0ed4a6a070431129468b18e6129c76ba9f57186f1df13dd7e302158171827d3faa8a49a78f53162c85266f434b0c83b0dbbfab4bd8c82573efdf5aefc487da8ac191f868b7ab8f1fb", 0xe0, 0x5}], 0x840000, &(0x7f00000014c0)={[{@umask={'umask', 0x3d, 0x8e}}, {@uid={'uid', 0x3d, r0}}, {@uid={'uid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@umask={'umask', 0x3d, 0x4}}, {@session={'session', 0x3d, 0x578e}}], [{@dont_hash='dont_hash'}, {@fsname={'fsname', 0x3d, '+!('}}]}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000001580)={r1, 0x10000, 0x9, "5cfa7bd4819492e5af5f518b20c3b9c73ab00dd7d98590dd201fe4fc7ae89d845fe1294c17131246c6f8598913bc9442a492a9ce3e66c76a0c1307dabc6b61e88dea39cb82ee86807f922f4e71bc19d85e6dc9ac260d46a8cc880aa0ac19deff52c36d7d611f32dcf54b12a3ef4c77d78c9cad075be79a3c9648d85429740426f137f9798dbad929a0f0142d2f74125eacd2668d45813f40d4d3211de38ddf2d6e8bbecfada925b50ec4"}) 05:14:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x48}, 0x0) 05:14:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000"], 0x34}}, 0x0) [ 1889.994052][ T1497] loop2: detected capacity change from 8 to 0 05:14:44 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000001080)={0x0, 0x2, 0x4, 0x1000, 0x3, {0x77359400}, {0x3, 0x8, 0x8, 0x4, 0x5, 0x6, "0b06cdaa"}, 0x8, 0x1, @userptr=0x6, 0x8001, 0x0, r1}) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) recvfrom$rose(r1, &(0x7f0000000040)=""/4096, 0x1000, 0x2120, &(0x7f0000001040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x3, [@default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) 05:14:44 executing program 2: socketpair(0x1d, 0x6, 0x2, &(0x7f00000068c0)) 05:14:44 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) inotify_rm_watch(r1, 0x0) 05:14:44 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @default}, 0x1c) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) [ 1890.168645][ T1512] loop3: detected capacity change from 8 to 0 05:14:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000008000"], 0x34}}, 0x0) 05:14:44 executing program 2: socketpair(0x1d, 0x6, 0x2, &(0x7f00000068c0)) 05:14:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x4c}, 0x0) 05:14:44 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x6, 0x7, "209dad7bc7967da8f8d75c26afc1793d78f4206e95850b84a94ed6018852d3d376cbd51d109f293d2f271b1d047c67326a6aee78310a75abf653bba36b917278", "d14a90b73863a1b67095f52bd257d71078f58d2ba4cbad59aeac66fcd11a5f9b219719dd8c0c2f0673851f63e21d157b79fbdaf49c146ef45b837198961f7925", "37607285a31920db51ccf0b6044c70565e2512b27b33077ba72b4939eafccbdf", [0x7402, 0xfffffffffffffbff]}) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002140)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x8, &(0x7f0000004080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0]) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004340)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r4, &(0x7f00000063c0)={0x18, 0x0, r5, {0x401}}, 0x18) write$FUSE_WRITE(r4, &(0x7f0000006500)={0x18, 0xfffffffffffffff5, r5, {0xcf}}, 0x18) syz_mount_image$fuse(&(0x7f0000008700)='fuse\x00', &(0x7f0000008740)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000008780)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x3}}], [{@fowner_lt={'fowner<'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise='appraise'}, {@obj_role={'obj_role', 0x3d, '/dev/cuse\x00'}}, {@subj_role={'subj_role', 0x3d, '#.]'}}, {@seclabel='seclabel'}]}}) syz_mount_image$fuse(&(0x7f0000000000)='fuse\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x4800, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other='allow_other'}], [{@permit_directio='permit_directio'}]}}) socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) 05:14:44 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) inotify_rm_watch(r1, 0x0) 05:14:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:44 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:44 executing program 2: socketpair(0x1d, 0x6, 0x2, &(0x7f00000068c0)) [ 1890.418280][ T1531] fuse: Bad value for 'group_id' 05:14:44 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) inotify_rm_watch(r1, 0x0) [ 1890.465849][ T1531] fuse: Bad value for 'group_id' 05:14:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x60}, 0x0) 05:14:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:44 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000040)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x80100, 0x0) 05:14:44 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0xe100, 0x1f, {0x0, 0x2710}, {0x3, 0x2, 0xfa, 0x1f, 0x1, 0x2, "5c5c3bba"}, 0x3, 0x4, @planes=&(0x7f0000000080)={0xfffffffe, 0x80, @fd, 0x1467}, 0x6}) 05:14:44 executing program 2: socketpair(0x0, 0x6, 0x2, &(0x7f00000068c0)) 05:14:44 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') inotify_rm_watch(r1, 0x0) 05:14:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x68}, 0x0) 05:14:44 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x40) waitid(0x0, 0x0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) 05:14:44 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000040)) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0xe100, 0x1f, {0x0, 0x2710}, {0x3, 0x2, 0xfa, 0x1f, 0x1, 0x2, "5c5c3bba"}, 0x3, 0x4, @planes=&(0x7f0000000080)={0xfffffffe, 0x80, @fd, 0x1467}, 0x6}) 05:14:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:44 executing program 2: socketpair(0x0, 0x6, 0x2, &(0x7f00000068c0)) 05:14:45 executing program 2: socketpair(0x0, 0x6, 0x2, &(0x7f00000068c0)) 05:14:45 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @null}, 0x1c) ioctl$SIOCRSACCEPT(r0, 0x89e3) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@bcast) 05:14:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x6c}, 0x0) 05:14:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:45 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_rm_watch(r1, 0x0) 05:14:45 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x40) waitid(0x0, 0x0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) 05:14:45 executing program 2: socketpair(0x1d, 0x0, 0x2, &(0x7f00000068c0)) 05:14:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:45 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_rm_watch(r1, 0x0) 05:14:45 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @null}, 0x1c) ioctl$SIOCRSACCEPT(r0, 0x89e3) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@bcast) 05:14:45 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x40) waitid(0x0, 0x0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) 05:14:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x74}, 0x0) 05:14:45 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) inotify_rm_watch(r1, 0x0) 05:14:45 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) waitid(0x0, 0x0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) 05:14:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:45 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @null}, 0x1c) ioctl$SIOCRSACCEPT(r0, 0x89e3) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@bcast) 05:14:45 executing program 2: socketpair(0x1d, 0x0, 0x0, &(0x7f00000068c0)) 05:14:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x7a}, 0x0) 05:14:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:45 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) waitid(0x0, 0x0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) 05:14:45 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @null}, 0x1c) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@bcast) 05:14:45 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) inotify_rm_watch(r1, 0x0) [ 1891.398164][ T1615] can: request_module (can-proto-0) failed. 05:14:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x300}, 0x0) 05:14:45 executing program 2: socketpair(0x1d, 0x0, 0x0, &(0x7f00000068c0)) 05:14:45 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) waitid(0x0, 0x0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) 05:14:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:45 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) inotify_rm_watch(0xffffffffffffffff, 0x0) 05:14:45 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000000)=@bcast) 05:14:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x500}, 0x0) [ 1891.614612][ T1631] can: request_module (can-proto-0) failed. 05:14:45 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x40) waitid(0x0, 0x0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) 05:14:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:45 executing program 2: socketpair(0x1d, 0x0, 0x0, &(0x7f00000068c0)) 05:14:45 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) inotify_rm_watch(0xffffffffffffffff, 0x0) 05:14:45 executing program 0: ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)=@bcast) 05:14:45 executing program 3: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x40) waitid(0x0, 0x0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) 05:14:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x600}, 0x0) 05:14:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) [ 1891.793150][ T1656] can: request_module (can-proto-0) failed. 05:14:46 executing program 2: socketpair(0x1d, 0x0, 0x2, 0x0) 05:14:46 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) inotify_rm_watch(0xffffffffffffffff, 0x0) 05:14:46 executing program 0: ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)=@bcast) 05:14:46 executing program 3: bind$rose(0xffffffffffffffff, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) 05:14:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x700}, 0x0) 05:14:46 executing program 2: socketpair(0x1d, 0x0, 0x2, 0x0) 05:14:46 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 05:14:46 executing program 0: ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)=@bcast) 05:14:46 executing program 3: bind$rose(0xffffffffffffffff, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) 05:14:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x900}, 0x0) 05:14:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:46 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 05:14:46 executing program 2: socketpair(0x1d, 0x0, 0x2, 0x0) 05:14:46 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)=@bcast) 05:14:46 executing program 3: bind$rose(0xffffffffffffffff, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000040), 0x8, &(0x7f00000000c0)) 05:14:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xa00}, 0x0) 05:14:46 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_rm_watch(r0, 0x0) 05:14:46 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) inotify_rm_watch(r1, 0x0) 05:14:46 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)=@bcast) 05:14:46 executing program 3: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x40) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)) 05:14:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:46 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_rm_watch(r0, 0x0) 05:14:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xb00}, 0x0) 05:14:46 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)=@bcast) 05:14:46 executing program 3: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x40) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)) 05:14:46 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f000000080003004137874ae6990486801b48c680be598565be1b7b2124182d25aff78f3d2b9efac8db84bddc0adfdb715afdeeda2f1870d42d38531b667c7f6bc742dc7337ace192256b35aa4375d89722efbffca08408881b96fb2f0d214417b97c612207ca96b4df50a0f1c34a7684f30b37e1df4377df43730ce0e74d1603edb2f0d5d21a4f8055be6986c712a9dbc833051cbd47f93f01e5797b2e38a4dbf50b9c4c68772ddcbf0db2716837ec8deec2b3083c522c4f46a12dcf6f3381e3d522efa777511d", @ANYRES32=r5, @ANYBLOB="040005010500d500000000000c001780050002000e000000"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40001000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000427bd7000fcdbdf2cff000008000300de7a867c5898f35fcf382e695b3969064296d712bf0e0fddb439b942d9aec20367a395e09a16619932d750dfb34d0de2b49d3110ec91eb7d2f3784a4fc928df15fdcf7bb6b0253c5250fc08211d1268bb6e6d2580af1c20bf18fed00", @ANYRES32=r6, @ANYBLOB="00990b030000006b2522c2"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) 05:14:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:46 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:46 executing program 4: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) inotify_rm_watch(r0, 0x0) 05:14:46 executing program 3: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x40) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)) 05:14:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xc00}, 0x0) 05:14:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)={0x128c, r2, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xd3, 0x45, "b245a407deef96374d78754e0886f6f3ddf2c86c142e1d3357bfbf6063f8fcd5dd0607d229f0ddeb0c9b12404ce9fdfbbd3663fc630cf225f7f18276ba5eaacc8149f042a9dec0574e110965896bcd294075f7b81c0d156c9abab9f5039feadd0dfd358fb85d7bb0aebe543c98b8f15ebec71ea167bd868056e02dcd16208f728f420d0426c2d2c5e01f27bbe3781769bffcc41be6352251c2f6b01618f8cf7fac0ec64347da7c9c878ad40602c246696ab0d97735c0d4cf671a2e6e494bd96f0945fc5d28880a1d14ce4c8d298036"}, @NL80211_ATTR_TESTDATA={0x84, 0x45, "12422699661f6d12442ab755d031b6f3317dca7427721ffc0c074f1a27e1f7791d49906d782b73159e1619ce411cc809ecc4038de3d4af919969abc251292f279c523d63cfa0eb154cc69bbfd88a26e9c4deb71a3991175cbbbbb73a90c9745ee3b641a23dbaf7b8e74d641990d88b5c2d9b3c9fc41e91ead76b41d6b556586b"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x65, 0x45, "e93048f50318b623254ede3807b4f0a59150b5c83ab0a9fac6c97b07cd301bec1e302adaca72f62118324deb3a1755dec51c095fae17bd7885dc88a4c648da3ed7aeb6602682758d0c692b10df3b3770cf9525ec0a455a2fb88386387d1ab8a34c"}, @NL80211_ATTR_TESTDATA={0x7b, 0x45, "c2d52277c91502feb818b81515f5cfbd46f184b78555b290e4e6df7619999b9dbf1ead29802cbbbfd0f366ccdefe28325670b60aff7c105c2614f38238f03ef7d1410cde10eb7702e107a6d6c616e485b64a50a1a42b804fe8d2c0d5bc19812e592678ec87a516d7a27f714fea3ef0cf9cbda06c51617c"}, @NL80211_ATTR_TESTDATA={0x38, 0x45, "16778b652692dfd3400e8e323fdd6371e106c52218a59c88c4443b55e2384c9a1b8a81b73b9429577a68c9f76f855a5fed0806bb"}]}, 0x128c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) syz_mount_image$hfs(&(0x7f0000000500)='hfs\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, &(0x7f0000001a40)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x67}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x19}]}, 0x74}, 0x1, 0x0, 0x0, 0x51}, 0x8) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) write$FUSE_INTERRUPT(r5, &(0x7f0000000040)={0x10}, 0x10) 05:14:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:46 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:46 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) 05:14:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xd00}, 0x0) 05:14:47 executing program 3: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x40) waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)) 05:14:47 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:47 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) 05:14:47 executing program 3: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x40) waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)) 05:14:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:47 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xe00}, 0x0) 05:14:47 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:47 executing program 4: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) 05:14:47 executing program 3: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x40) waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)) 05:14:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000800001"], 0x34}}, 0x0) 05:14:47 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:47 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xf00}, 0x0) 05:14:47 executing program 3: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast, @default]}, 0x40) waitid(0x0, 0x0, &(0x7f0000000040), 0x8, 0x0) 05:14:47 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:47 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:47 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 05:14:47 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x1100}, 0x0) 05:14:47 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000040)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:47 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 05:14:47 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffff, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x7, [@null, @default, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 05:14:47 executing program 0: ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 05:14:47 executing program 2: ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 05:14:47 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 05:14:47 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 05:14:47 executing program 2: ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 05:14:47 executing program 3: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 05:14:47 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) 05:14:47 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x1200}, 0x0) 05:14:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x74000000, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:47 executing program 0: ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 05:14:47 executing program 2: ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 05:14:47 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f00000068c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000212}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x32}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6670}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x90a5) socketpair(0x9, 0x1, 0x81, &(0x7f0000000000)) socket$bt_bnep(0x1f, 0x3, 0x4) [ 1893.743765][ T1837] __nla_validate_parse: 46 callbacks suppressed [ 1893.743781][ T1837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1893.771043][ T1838] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:14:48 executing program 0: ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 05:14:48 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) [ 1893.816647][ T1842] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x1800}, 0x0) 05:14:48 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f00000068c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000212}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x32}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6670}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x90a5) socketpair(0x9, 0x1, 0x81, &(0x7f0000000000)) socket$bt_bnep(0x1f, 0x3, 0x4) 05:14:48 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$rose(r5, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r7, 0xac00, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf25540000000a00060008021100000100000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a0006000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x6dae5da5e4881eb7) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x6}}, 0x18) 05:14:48 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 05:14:48 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 05:14:48 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) [ 1893.974423][ T1855] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:48 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f00000068c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000212}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x32}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6670}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x90a5) socketpair(0x9, 0x1, 0x81, &(0x7f0000000000)) socket$bt_bnep(0x1f, 0x3, 0x4) 05:14:48 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 05:14:48 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$rose(r5, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r7, 0xac00, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf25540000000a00060008021100000100000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a0006000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x6dae5da5e4881eb7) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x6}}, 0x18) [ 1894.056468][ T1862] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:48 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) 05:14:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x2000}, 0x0) 05:14:48 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f00000068c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000212}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x32}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6670}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x90a5) socketpair(0x9, 0x1, 0x81, &(0x7f0000000000)) 05:14:48 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 05:14:48 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 05:14:48 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:48 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$rose(r5, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r7, 0xac00, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf25540000000a00060008021100000100000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a0006000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x6dae5da5e4881eb7) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x6}}, 0x18) [ 1894.245407][ T1879] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1894.292859][ T1884] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:48 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 05:14:48 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) 05:14:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x2100}, 0x0) 05:14:48 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f00000068c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000212}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x2, 0x32}}}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1f}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xfff}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xb}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6670}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x90a5) 05:14:48 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:48 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$rose(r5, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf25540000000a00060008021100000100000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a0006000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x6dae5da5e4881eb7) [ 1894.496676][ T1899] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:48 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) 05:14:48 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) [ 1894.547240][ T1904] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:48 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f00000068c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) 05:14:48 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:48 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$rose(r5, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) 05:14:48 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x2500}, 0x0) 05:14:48 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) 05:14:48 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$rose(r5, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r6, 0xac00, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf25540000000a00060008021100000100000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a0006000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x6dae5da5e4881eb7) 05:14:48 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) 05:14:48 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$rose(r5, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) [ 1894.758077][ T1921] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:48 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f00000068c0)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) 05:14:49 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x2eec}, 0x0) 05:14:49 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) 05:14:49 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:49 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$rose(r5, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) 05:14:49 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f00000068c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') 05:14:49 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x4000}, 0x0) 05:14:49 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:49 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:49 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$rose(r5, 0x104, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:14:49 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f00000068c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 05:14:49 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x4800}, 0x0) 05:14:49 executing program 0: socketpair(0x29, 0x802, 0x201, &(0x7f00000068c0)) 05:14:49 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:49 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) getsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000140), &(0x7f0000000180)=0x4) 05:14:49 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f00000068c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 05:14:49 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) 05:14:49 executing program 0: socketpair(0x29, 0x802, 0x201, &(0x7f00000068c0)) 05:14:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x4c00}, 0x0) 05:14:49 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f00000068c0)) socket$nl_generic(0x10, 0x3, 0x10) 05:14:49 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:49 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:49 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) 05:14:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x6000}, 0x0) 05:14:49 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:49 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:49 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f00000068c0)) 05:14:49 executing program 0: socketpair(0x29, 0x802, 0x201, &(0x7f00000068c0)) 05:14:49 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) 05:14:49 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:49 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x6800}, 0x0) 05:14:49 executing program 0: socketpair(0x0, 0x802, 0x201, &(0x7f00000068c0)) 05:14:50 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:50 executing program 3: socketpair(0x0, 0x0, 0x2, &(0x7f00000068c0)) 05:14:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:50 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x6c00}, 0x0) 05:14:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:50 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) 05:14:50 executing program 0: socketpair(0x0, 0x802, 0x201, &(0x7f00000068c0)) 05:14:50 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 05:14:50 executing program 3: socketpair(0x0, 0x0, 0x2, &(0x7f00000068c0)) 05:14:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x7400}, 0x0) 05:14:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:50 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) 05:14:50 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) 05:14:50 executing program 3: socketpair(0x0, 0x0, 0x2, &(0x7f00000068c0)) 05:14:50 executing program 0: socketpair(0x0, 0x802, 0x201, &(0x7f00000068c0)) 05:14:50 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:50 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) 05:14:50 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r2, 0xac00, 0x0) 05:14:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x7a00}, 0x0) 05:14:50 executing program 3: socketpair(0x21, 0x0, 0x0, &(0x7f00000068c0)) 05:14:50 executing program 0: socketpair(0x29, 0x0, 0x201, &(0x7f00000068c0)) 05:14:50 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) 05:14:50 executing program 2: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x2) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}}, 0x4040000) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) ioctl$VFIO_IOMMU_UNMAP_DMA(r5, 0x3b72, &(0x7f0000000100)={0xef, 0x3, 0x101, 0x1d518d7f, "8ad29b14cfecf136189aa5b4e7b0b706093673923d5da1ce1e7aa5ce2f6189845fbafb9557e09e8e70d6c6079eae19e2bdff1d3f3ccf840138689b151408503c48834305b481953ac82810bbc2071dad6575e7916d27c0d2b5ae47121390ef7902acc20d4ff5b18c08a0bc043f49d96bf3ae688cc14a79ce8cd676198740cf0ca8335ffaadcb1b59b06c7b64c83dfc56cd8f140c34acf19e3a5d2c24707e80f8a0078d45baa5ba38f7df06df276f61820e072255bbc4f0675b9594f34432eabf6ab05ca8345260297baef87cd05aae287cf8d0c9d79720"}) 05:14:50 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) 05:14:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xec2e}, 0x0) 05:14:50 executing program 3: socketpair(0x21, 0x0, 0x0, &(0x7f00000068c0)) 05:14:50 executing program 0: socketpair(0x29, 0x0, 0x201, &(0x7f00000068c0)) 05:14:50 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:50 executing program 2: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x54}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4010) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x8, &(0x7f0000004080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0]) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004340)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r5, &(0x7f00000063c0)={0x18, 0x0, r6, {0x401}}, 0x18) write$FUSE_WRITE(r5, &(0x7f0000006500)={0x18, 0xfffffffffffffff5, r6, {0xcf}}, 0x18) syz_mount_image$fuse(&(0x7f0000008700)='fuse\x00', &(0x7f0000008740)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000008780)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x3}}], [{@fowner_lt={'fowner<'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise='appraise'}, {@obj_role={'obj_role', 0x3d, '/dev/cuse\x00'}}, {@subj_role={'subj_role', 0x3d, '#.]'}}, {@seclabel='seclabel'}]}}) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x8, &(0x7f0000004080)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0x0]) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004340)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r9, &(0x7f00000063c0)={0x18, 0x0, r10, {0x401}}, 0x18) write$FUSE_WRITE(r9, &(0x7f0000006500)={0x18, 0xfffffffffffffff5, r10, {0xcf}}, 0x18) syz_mount_image$fuse(&(0x7f0000008700)='fuse\x00', &(0x7f0000008740)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000008780)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x3}}], [{@fowner_lt={'fowner<'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise='appraise'}, {@obj_role={'obj_role', 0x3d, '/dev/cuse\x00'}}, {@subj_role={'subj_role', 0x3d, '#.]'}}, {@seclabel='seclabel'}]}}) syz_mount_image$fuse(&(0x7f0000000180)='fuse\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other='allow_other'}, {@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x600}}, {@max_read={'max_read', 0x3d, 0x8718}}], [{@smackfsroot={'smackfsroot', 0x3d, 'nl80211\x00'}}, {@subj_role={'subj_role'}}, {@fowner_lt={'fowner<', r7}}]}}) 05:14:50 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) 05:14:50 executing program 3: socketpair(0x21, 0x0, 0x0, &(0x7f00000068c0)) 05:14:50 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x30000}, 0x0) 05:14:50 executing program 0: socketpair(0x29, 0x0, 0x201, &(0x7f00000068c0)) [ 1896.772059][ T2102] fuse: Bad value for 'group_id' 05:14:50 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:51 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) [ 1896.827149][ T2102] fuse: Bad value for 'group_id' 05:14:51 executing program 3: socketpair(0x21, 0x0, 0x2, 0x0) [ 1896.869700][ T2102] fuse: Bad value for 'group_id' 05:14:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x34000}, 0x0) 05:14:51 executing program 0: socketpair(0x29, 0x802, 0x0, &(0x7f00000068c0)) 05:14:51 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x7c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2004c015) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) 05:14:51 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:51 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) 05:14:51 executing program 3: socketpair(0x21, 0x0, 0x2, 0x0) 05:14:51 executing program 0: socketpair(0x29, 0x802, 0x0, &(0x7f00000068c0)) 05:14:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x400300}, 0x0) 05:14:51 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:14:51 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x610703, 0x0) 05:14:51 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:51 executing program 0: socketpair(0x29, 0x802, 0x0, &(0x7f00000068c0)) 05:14:51 executing program 3: socketpair(0x21, 0x0, 0x2, 0x0) 05:14:51 executing program 0: socketpair(0x29, 0x802, 0x201, 0x0) 05:14:51 executing program 4: getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:14:51 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002300)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 05:14:51 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x1000000}, 0x0) 05:14:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x292d0000}, 0x0) 05:14:51 executing program 4: getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:14:51 executing program 0: socketpair(0x29, 0x802, 0x201, 0x0) 05:14:51 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000002300)='/dev/vim2m\x00', 0x2, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000002340)={0x3, 0x1, 0x4, 0x800, 0x6, {}, {0x4, 0x1, 0x6, 0x8, 0x1, 0x20, "05b63040"}, 0x31a7, 0x1, @offset=0x6b51, 0x8001}) 05:14:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x2000000}, 0x0) 05:14:51 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x1c}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:51 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:51 executing program 0: socketpair(0x29, 0x802, 0x201, 0x0) 05:14:51 executing program 4: getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:14:51 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x1c}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 05:14:51 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x3000000}, 0x0) 05:14:51 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) 05:14:51 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:14:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 05:14:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={&(0x7f0000000700), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xa, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000002300)='/dev/vim2m\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002340)={0x3, 0x1, 0x4, 0x800, 0x6, {}, {0x4, 0x1, 0x6, 0x8, 0x1, 0x20, "05b63040"}, 0x31a7, 0x1, @offset=0x6b51, 0x8001}) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x20) socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) 05:14:52 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x4000000}, 0x0) 05:14:52 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:14:52 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000300)=@null) 05:14:52 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0xf00, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}}, 0x0) 05:14:52 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:52 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:52 executing program 0: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x40, 0x40, 0x40, 0x40, 0x40, 0x1c}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:52 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:14:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x5000000}, 0x0) 05:14:52 executing program 3: socketpair(0x22, 0xa, 0x2, &(0x7f00000068c0)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000000)={0xffff7fff, @dev={[], 0x13}}) socketpair(0x8, 0x4, 0xfffffffb, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x7) socketpair(0x2b, 0x800, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x2c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c013}, 0x4044050) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r7, 0xac00, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb4, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x20, 0x31}}}}, [@NL80211_ATTR_IE={0x78, 0x2a, [@mic={0x8c, 0x10, {0x881, "4f49864176ed", @short="083746d3c5b394c1"}}, @peer_mgmt={0x75, 0x6, {0x1, 0xc5, @val=0x7, @void, @void}}, @ibss={0x6, 0x2, 0x7}, @tim={0x5, 0x2f, {0x2, 0x72, 0x3, "b66c0ae207e1194fbaf2e71b53573705891a2aee694c9f36a520da41af8a5c9f7bba7e955cccb254e6511ecd"}}, @mesh_chsw={0x76, 0x6, {0x8, 0xaa, 0xb}}, @mic={0x8c, 0x18, {0x519, "321d9aed8407", @long="e741b6d6febc91cd9d90b420d7f76c83"}}, @dsss={0x3, 0x1, 0x3}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3ff}, @NL80211_ATTR_IE={0x14, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_id={0x72, 0x6}]}]}, 0xb4}}, 0x404c015) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xe}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf251100000008000300", @ANYRES32=r10, @ANYBLOB="0c009900090000001c0000000600140109000000180011f204000700040007000400030000000100040003000500e4909e190850c3b0a4dc92cdd50400010000000600ab0000f8000006001a01030000002500bd000300b77d01000100080000100800a400030000000500e400010000000600ed0070030000d008ddc4168956fc023a0f2d139fbe17cea28dcd44903dcff7651791c25e3d5f9bb551c321f4638cc8421820a08bf1f780e3112cb398babe2962a8d4fb6a07dcc2e7fe08027824746f8f6a7d790c6574984bc71114a57d053d08ae288213cc7522227eab454c79d5c7c508b67acd08512aa279e947e421b958caf25f4e543a25529efc7682fe897f5373f919dbbf"], 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) 05:14:52 executing program 1: syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)=@null) 05:14:52 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:52 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000300)={&(0x7f0000000940)={0x34, r7, 0x1, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0xff25, 0x2, 0x8}]}]}, 0x34}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0) r9 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080025bd7000ffdbdf25310000000c009900010000000f0000000800db00", @ANYRES32=r8, @ANYBLOB="0800db00", @ANYRES32=r0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r9, @ANYBLOB="0c009900ff01650d72000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000001080)=ANY=[@ANYBLOB="dbf617427180591f9f7f05315e5d73cb9bc0a3d844150346719ae669f821a9cf0f35f10de0c0fbaf75d0ed653a280d8240184db99a70682aaadd9733f8a4640eaf4a3bbda0263dc0bcb360a64e5beaf29e171d2f90170000000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x5c8}, 0x1, 0x0, 0x0, 0x26008815}, 0xcff6e46dced7aa3c) 05:14:52 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:14:52 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x6000000}, 0x0) 05:14:52 executing program 3: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = io_uring_setup(0x2065, &(0x7f0000000000)={0x0, 0xdae4, 0x0, 0x3, 0x3da}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 05:14:52 executing program 2: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:52 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:14:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x7000000}, 0x0) 05:14:52 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:52 executing program 3: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = io_uring_setup(0x2065, &(0x7f0000000000)={0x0, 0xdae4, 0x0, 0x3, 0x3da}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 05:14:52 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000300)={&(0x7f0000000940)={0x34, r7, 0x1, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0xff25, 0x2, 0x8}]}]}, 0x34}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0) r9 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080025bd7000ffdbdf25310000000c009900010000000f0000000800db00", @ANYRES32=r8, @ANYBLOB="0800db00", @ANYRES32=r0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r9, @ANYBLOB="0c009900ff01650d72000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000001080)=ANY=[@ANYBLOB="dbf617427180591f9f7f05315e5d73cb9bc0a3d844150346719ae669f821a9cf0f35f10de0c0fbaf75d0ed653a280d8240184db99a70682aaadd9733f8a4640eaf4a3bbda0263dc0bcb360a64e5beaf29e171d2f90170000000000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x5c8}, 0x1, 0x0, 0x0, 0x26008815}, 0xcff6e46dced7aa3c) 05:14:52 executing program 2: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:52 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 05:14:52 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:52 executing program 3: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = io_uring_setup(0x2065, &(0x7f0000000000)={0x0, 0xdae4, 0x0, 0x3, 0x3da}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) 05:14:52 executing program 2: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x8000000}, 0x0) 05:14:52 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000300)={&(0x7f0000000940)={0x34, r7, 0x1, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0xff25, 0x2, 0x8}]}]}, 0x34}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0) r9 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080025bd7000ffdbdf25310000000c009900010000000f0000000800db00", @ANYRES32=r8, @ANYBLOB="0800db00", @ANYRES32=r0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r9, @ANYBLOB="0c009900ff01650d72000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000001080)=ANY=[@ANYBLOB="dbf617427180591f9f7f05315e5d73cb9bc0a3d844150346719ae669f821a9cf0f35f10de0c0fbaf75d0ed653a280d8240184db99a70682aaadd9733f8a4640eaf4a3bbda0263dc0bcb360a64e5beaf29e171d2f90170000000000000000", @ANYRES16=0x0, @ANYBLOB="160226bd7000ffdbdf253900000094025a8028000280050004000000000019000200202f2f16502a0645260c02052b20221e511f10564d000000b400018018000100600c0c0360303e6c020b166c036c48120b031b6037000200361930453a4653194231362c24292e46571c0a05080835171340212a512d1a5010164f4d044a1910282156271c0e1954282e1200130001004836300b006c1be11b011817043360000500040002000000070001000903090005000400010000001500010004366c1b6c18011603481812036c0c30480000000500040002000000140003000600040039000000a90001048100ff0f300003802c000200492132491252051920443140203e390c160928373e023c0f5454450b02124928291b2d513d2f3022a800008014000300af6f07000300c71b018016010004080005000400010000001600010018480c03094803061603031d181b6c24302400000d0002000d10023d493e1a23210000004900020017511c560631302c191a0e4f553d160009351319225331044f21001c2351111c114a48251d41400b0a311c11012d4717154c1e1928064c29452a310a4812315710411a060f0000001400030004009a0001000400040006000200110654000180140003003f0002000028040009001f004000621a1e00010060010c2460066000016c24040430483648306c163648180403000000050004000100000014000300000209000800000003000000070005008800038005000400010000000500040001000000050004000100000019000100064805164848020318300c091812540303010b241b000000130001006c366c0425010660306c094106600b0014000300ff070500020008000400be05bf000100140003008100040008000600ed0004000800306d09000100480609180c000000050004000100000078005a807400008014000300ccf4c40a000005003b0003000600020005000400000000000400010011000100306c043004240b094809301b060000000b000200133e4b1326562400220001001d02046c01060409010024050c120c09186c12050503163006031b05121b00000a0001007c4016181b040000a8025a8048000080140003008a754000ff0f800002004000030003001000020007400e06330a1554024a4555200001000c24360409090648024824030116183206066c0b0b24160c3609050b50000380140003000600ffff09000300ffff24080004c0000500040000000000120001003036363048026c4804021b241b040000050004000000000014000300010003000400050002005dc50900020058000380140003000104040006000700060004000002ff0f14000300090006000700000008000600b109e6c414000300ff03cd5001000300090014350100feff05000100030000000e00010018183f0101094800010c0000300002801100010012093002063616300906304836000000180001000524301b36010205061801246c160c692424090c1800008014000300000005005af40700070000100700ffffa80001800500040002000000220002000f09534e0a1218050f4c4825413d3c2411131045205611100c394a32520700001400030003001ac29cdcc04d00007e000200200046000200314e1019042c17492621454f260a4f50010649522b29393c41513e0d4d560d2a09270c05053c06180b35294346312c4c0e1925150e190a1f20090a50412d3a0823330000050004000200000014000100360c160c241b00090b09180630120305c000018014000300fbff06000500ff010101980eff070200140003004ba6020008000100608c00fe070000001f0001000c1b1b0003181b046016060b030936301b1b040574481b30160c03004d0002003d2b0235523b2b412f1e13510e384a3a1f412f101b1d363129442523120416143a0a542f160110524e073a0247060e443c5114493d3115301f200756373f374044282012334911472100000014000300e800010001800500e4ae7f00020004000f00010004180b1a040c040b0b0c030004000180"], 0x5c8}, 0x1, 0x0, 0x0, 0x26008815}, 0xcff6e46dced7aa3c) 05:14:52 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f0000000080)) 05:14:52 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, 0x0) 05:14:52 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:52 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, 0x0) 05:14:52 executing program 3: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) io_uring_setup(0x2065, &(0x7f0000000000)={0x0, 0xdae4, 0x0, 0x3, 0x3da}) [ 1898.766554][ T2305] __nla_validate_parse: 45 callbacks suppressed [ 1898.766570][ T2305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1898.789999][ T2309] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x6000000}, 0x0) 05:14:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x9000000}, 0x0) 05:14:53 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000300)={&(0x7f0000000940)={0x34, r7, 0x1, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0xff25, 0x2, 0x8}]}]}, 0x34}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0) r9 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080025bd7000ffdbdf25310000000c009900010000000f0000000800db00", @ANYRES32=r8, @ANYBLOB="0800db00", @ANYRES32=r0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r9, @ANYBLOB="0c009900ff01650d72000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) 05:14:53 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, 0x0) 05:14:53 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:53 executing program 3: io_uring_setup(0x2065, &(0x7f0000000000)={0x0, 0xdae4, 0x0, 0x3, 0x3da}) [ 1898.996298][ T2329] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1899.000447][ T2332] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 05:14:53 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:53 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, 0x0) 05:14:53 executing program 1: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x3, 0x0, 0x0) [ 1899.056636][ T2327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1899.078077][ T2337] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:53 executing program 3: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xdae4, 0x0, 0x3, 0x3da}) 05:14:53 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000300)={&(0x7f0000000940)={0x34, r7, 0x1, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0xff25, 0x2, 0x8}]}]}, 0x34}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0) r9 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080025bd7000ffdbdf25310000000c009900010000000f0000000800db00", @ANYRES32=r8, @ANYBLOB="0800db00", @ANYRES32=r0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r9, @ANYBLOB="0c009900ff01650d72000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800) 05:14:53 executing program 1: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000300)={&(0x7f0000000940)={0x34, r7, 0x1, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0xff25, 0x2, 0x8}]}]}, 0x34}}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0) r9 = getpid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080025bd7000ffdbdf25310000000c009900010000000f0000000800db00", @ANYRES32=r8, @ANYBLOB="0800db00", @ANYRES32=r0, @ANYBLOB='\b\x00R\x00', @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=r9, @ANYBLOB="0c009900ff01650d72000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) 05:14:53 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, 0x0, 0x0) 05:14:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xa000000}, 0x0) 05:14:53 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xa, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:53 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, 0x0, 0x0) [ 1899.330211][ T2362] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:53 executing program 3: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xdae4, 0x0, 0x3, 0x3da}) 05:14:53 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) [ 1899.383498][ T2357] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1899.383732][ T2365] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1899.397453][ T2356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 05:14:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:53 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, 0x0, 0x0) 05:14:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xb000000}, 0x0) 05:14:53 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000300)={&(0x7f0000000940)={0x34, r5, 0x1, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0xff25, 0x2, 0x8}]}]}, 0x34}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0) getpid() 05:14:53 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:53 executing program 3: io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xdae4, 0x0, 0x3, 0x3da}) 05:14:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:53 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:53 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xc000000}, 0x0) 05:14:53 executing program 3: io_uring_setup(0x2065, 0x0) 05:14:53 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000300)={&(0x7f0000000940)={0x34, r5, 0x1, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0xff25, 0x2, 0x8}]}]}, 0x34}}, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80000, 0x0) 05:14:54 executing program 4: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:54 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:54 executing program 3: io_uring_setup(0x2065, 0x0) 05:14:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xd000000}, 0x0) 05:14:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:54 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r3, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000009c0)={&(0x7f0000000880), 0xc, &(0x7f0000000300)={&(0x7f0000000940)={0x34, r5, 0x1, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0xff25, 0x2, 0x8}]}]}, 0x34}}, 0x0) 05:14:54 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:54 executing program 4: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:54 executing program 3: io_uring_setup(0x2065, 0x0) 05:14:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xe000000}, 0x0) 05:14:54 executing program 4: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:54 executing program 3: io_uring_setup(0x2065, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x3da}) 05:14:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:54 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0xf000000}, 0x0) 05:14:54 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:54 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r2, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') [ 1900.244699][ T2441] FAULT_INJECTION: forcing a failure. [ 1900.244699][ T2441] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:14:54 executing program 3: io_uring_setup(0x2065, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3da}) [ 1900.330446][ T2441] CPU: 0 PID: 2441 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 1900.339155][ T2441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1900.349231][ T2441] Call Trace: [ 1900.352511][ T2441] dump_stack+0x183/0x22e [ 1900.356850][ T2441] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1900.362576][ T2441] ? show_regs_print_info+0x12/0x12 [ 1900.367778][ T2441] ? __lock_acquire+0x5e40/0x5e40 [ 1900.372812][ T2441] should_fail+0x384/0x4b0 05:14:54 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r2, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) [ 1900.377235][ T2441] _copy_from_user+0x2d/0x170 [ 1900.381920][ T2441] __sys_bind+0x1e0/0x3f0 [ 1900.386257][ T2441] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1900.391548][ T2441] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 1900.397533][ T2441] ? print_irqtrace_events+0x220/0x220 [ 1900.402994][ T2441] ? print_irqtrace_events+0x220/0x220 [ 1900.408460][ T2441] ? syscall_enter_from_user_mode+0x24/0x190 [ 1900.414453][ T2441] ? lockdep_hardirqs_on+0x8d/0x130 [ 1900.419676][ T2441] __x64_sys_bind+0x76/0x80 [ 1900.424195][ T2441] do_syscall_64+0x2d/0x70 05:14:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x10000000}, 0x0) 05:14:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) [ 1900.428635][ T2441] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1900.434537][ T2441] RIP: 0033:0x45e219 [ 1900.438439][ T2441] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1900.458042][ T2441] RSP: 002b:00007ff350537c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1900.466456][ T2441] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 05:14:54 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) [ 1900.474433][ T2441] RDX: 0000000000000040 RSI: 0000000020000000 RDI: 0000000000000004 [ 1900.482416][ T2441] RBP: 00007ff350537ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1900.490391][ T2441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1900.498363][ T2441] R13: 00007ffe37c7f6ef R14: 00007ff3505389c0 R15: 000000000119bf8c 05:14:54 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:54 executing program 3: io_uring_setup(0x2065, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3da}) 05:14:54 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r2, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 05:14:55 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x11000000}, 0x0) 05:14:55 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:55 executing program 4: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:55 executing program 3: io_uring_setup(0x2065, &(0x7f0000000000)) 05:14:55 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r2, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) 05:14:55 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:55 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, 0x0, 0x0) 05:14:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x12000000}, 0x0) [ 1900.935621][ T2498] FAULT_INJECTION: forcing a failure. [ 1900.935621][ T2498] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:14:55 executing program 3: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r2, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) [ 1901.031362][ T2498] CPU: 1 PID: 2498 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 1901.040183][ T2498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1901.050244][ T2498] Call Trace: [ 1901.053524][ T2498] dump_stack+0x183/0x22e [ 1901.057864][ T2498] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1901.063597][ T2498] ? show_regs_print_info+0x12/0x12 [ 1901.068800][ T2498] ? __lock_acquire+0x5e40/0x5e40 [ 1901.073863][ T2498] ? snprintf+0xc0/0x110 [ 1901.078124][ T2498] should_fail+0x384/0x4b0 [ 1901.082548][ T2498] _copy_to_user+0x2d/0x130 [ 1901.087064][ T2498] simple_read_from_buffer+0xd9/0x160 [ 1901.092449][ T2498] proc_fail_nth_read+0x195/0x210 [ 1901.097484][ T2498] ? proc_fault_inject_write+0x370/0x370 [ 1901.103129][ T2498] ? rw_verify_area+0x1b8/0x370 [ 1901.107982][ T2498] ? fsnotify_perm+0x2fd/0x4d0 [ 1901.112755][ T2498] ? proc_fault_inject_write+0x370/0x370 [ 1901.118399][ T2498] vfs_read+0x294/0xc20 [ 1901.122564][ T2498] ? mutex_lock_io_nested+0x60/0x60 [ 1901.127782][ T2498] ? kernel_read+0x70/0x70 [ 1901.132212][ T2498] ? __fget_files+0x34f/0x380 [ 1901.136905][ T2498] ? mutex_lock_nested+0x1a/0x20 [ 1901.141844][ T2498] ? __fdget_pos+0x24e/0x2f0 [ 1901.146438][ T2498] ? ksys_read+0x72/0x2a0 [ 1901.150773][ T2498] ksys_read+0x171/0x2a0 [ 1901.155036][ T2498] ? vfs_write+0xc90/0xc90 [ 1901.159455][ T2498] ? syscall_enter_from_user_mode+0x24/0x190 [ 1901.165443][ T2498] ? syscall_enter_from_user_mode+0x24/0x190 [ 1901.171436][ T2498] do_syscall_64+0x2d/0x70 [ 1901.175963][ T2498] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1901.181862][ T2498] RIP: 0033:0x417b11 [ 1901.185760][ T2498] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1901.205368][ T2498] RSP: 002b:00007ff350537c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 1901.213802][ T2498] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417b11 [ 1901.221817][ T2498] RDX: 000000000000000f RSI: 00007ff350537cb0 RDI: 0000000000000003 05:14:55 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, 0x0, 0x0) [ 1901.229797][ T2498] RBP: 00007ff350537ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1901.237772][ T2498] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1901.245755][ T2498] R13: 00007ffe37c7f6ef R14: 00007ff3505389c0 R15: 000000000119bf8c 05:14:55 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r1, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000002c0)={0x18}) 05:14:55 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x18000000}, 0x0) 05:14:55 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, 0x0, 0x0) 05:14:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:55 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0xff, 0x5, 0x18, 0x0, "fa1de5fed96f7340a93eeabae89d7da3e65466621e2aa5a58f3331f85c8d65ec7d528ad8619e3a3322ff1591ffb374bacaada9af8513ac46bf0d0f3fae6cd2a3", "9c1d7ab115e5f29d7477de3b9c9f2945ed19ccb815f84e98f6eeb17bcae5997a", [0x100000000, 0x27]}) 05:14:55 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:55 executing program 3 (fault-call:0 fault-nth:0): io_uring_setup(0x2065, &(0x7f0000000000)) 05:14:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x20000000}, 0x0) 05:14:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) [ 1901.638270][ T2545] FAULT_INJECTION: forcing a failure. [ 1901.638270][ T2545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1901.643634][ T2547] FAULT_INJECTION: forcing a failure. [ 1901.643634][ T2547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1901.678247][ T2545] CPU: 0 PID: 2545 Comm: syz-executor.4 Not tainted 5.11.0-rc3-syzkaller #0 05:14:55 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) [ 1901.687045][ T2545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1901.697103][ T2545] Call Trace: [ 1901.700390][ T2545] dump_stack+0x183/0x22e [ 1901.704738][ T2545] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1901.710477][ T2545] ? show_regs_print_info+0x12/0x12 [ 1901.715687][ T2545] ? __lock_acquire+0x5e40/0x5e40 [ 1901.720728][ T2545] should_fail+0x384/0x4b0 [ 1901.725848][ T2545] _copy_from_user+0x2d/0x170 [ 1901.730537][ T2545] __sys_bind+0x1e0/0x3f0 [ 1901.734918][ T2545] ? __ia32_sys_socketpair+0xb0/0xb0 [ 1901.740616][ T2545] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 1901.747187][ T2545] ? print_irqtrace_events+0x220/0x220 [ 1901.752662][ T2545] ? print_irqtrace_events+0x220/0x220 [ 1901.758289][ T2545] ? syscall_enter_from_user_mode+0x24/0x190 [ 1901.764281][ T2545] ? lockdep_hardirqs_on+0x8d/0x130 [ 1901.770308][ T2545] __x64_sys_bind+0x76/0x80 [ 1901.775790][ T2545] do_syscall_64+0x2d/0x70 [ 1901.780213][ T2545] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1901.786149][ T2545] RIP: 0033:0x45e219 [ 1901.790256][ T2545] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1901.809891][ T2545] RSP: 002b:00007f71e0251c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1901.818311][ T2545] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1901.826860][ T2545] RDX: 0000000000000040 RSI: 0000000020000000 RDI: 0000000000000004 [ 1901.834937][ T2545] RBP: 00007f71e0251ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1901.842923][ T2545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1901.850912][ T2545] R13: 00007fff90ee040f R14: 00007f71e02529c0 R15: 000000000119bf8c [ 1901.860541][ T2547] CPU: 1 PID: 2547 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1901.869231][ T2547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1901.879284][ T2547] Call Trace: [ 1901.882566][ T2547] dump_stack+0x183/0x22e [ 1901.886907][ T2547] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1901.892642][ T2547] ? show_regs_print_info+0x12/0x12 [ 1901.897861][ T2547] ? __lock_acquire+0x5e40/0x5e40 [ 1901.902893][ T2547] ? rcu_read_lock_sched_held+0x87/0x110 [ 1901.908548][ T2547] should_fail+0x384/0x4b0 [ 1901.912975][ T2547] _copy_from_user+0x2d/0x170 [ 1901.917665][ T2547] __se_sys_io_uring_setup+0xb4/0x37b0 [ 1901.923133][ T2547] ? ksys_write+0x219/0x2a0 [ 1901.927641][ T2547] ? __lock_acquire+0x5e40/0x5e40 [ 1901.932690][ T2547] ? file_end_write+0x220/0x220 [ 1901.937566][ T2547] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1901.943119][ T2547] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 1901.949108][ T2547] ? print_irqtrace_events+0x220/0x220 [ 1901.954572][ T2547] ? print_irqtrace_events+0x220/0x220 [ 1901.960047][ T2547] ? syscall_enter_from_user_mode+0x24/0x190 [ 1901.966036][ T2547] ? syscall_enter_from_user_mode+0x24/0x190 [ 1901.972031][ T2547] do_syscall_64+0x2d/0x70 [ 1901.976451][ T2547] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1901.982349][ T2547] RIP: 0033:0x45e219 [ 1901.986243][ T2547] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1902.005860][ T2547] RSP: 002b:00007fc7809e0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1902.014885][ T2547] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1902.022881][ T2547] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002065 [ 1902.031044][ T2547] RBP: 00007fc7809e0ca0 R08: 0000000000000000 R09: 0000000000000000 05:14:56 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x21000000}, 0x0) [ 1902.039270][ T2547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1902.047694][ T2547] R13: 00007ffcb1c9a79f R14: 00007fc7809e19c0 R15: 000000000119bf8c 05:14:56 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, 0x0) 05:14:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x25000000}, 0x0) [ 1902.215687][ T2567] FAULT_INJECTION: forcing a failure. [ 1902.215687][ T2567] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:14:56 executing program 3 (fault-call:0 fault-nth:1): io_uring_setup(0x2065, &(0x7f0000000000)) 05:14:56 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) 05:14:56 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xa, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) [ 1902.355932][ T2567] CPU: 1 PID: 2567 Comm: syz-executor.4 Not tainted 5.11.0-rc3-syzkaller #0 [ 1902.364667][ T2567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1902.374738][ T2567] Call Trace: [ 1902.378029][ T2567] dump_stack+0x183/0x22e [ 1902.382678][ T2567] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1902.388424][ T2567] ? show_regs_print_info+0x12/0x12 [ 1902.395030][ T2567] ? __lock_acquire+0x5e40/0x5e40 [ 1902.400127][ T2567] ? snprintf+0xc0/0x110 [ 1902.404387][ T2567] should_fail+0x384/0x4b0 [ 1902.409561][ T2567] _copy_to_user+0x2d/0x130 [ 1902.414095][ T2567] simple_read_from_buffer+0xd9/0x160 [ 1902.419486][ T2567] proc_fail_nth_read+0x195/0x210 [ 1902.425160][ T2567] ? proc_fault_inject_write+0x370/0x370 [ 1902.430811][ T2567] ? rw_verify_area+0x1b8/0x370 [ 1902.436310][ T2567] ? fsnotify_perm+0x2fd/0x4d0 [ 1902.441323][ T2567] ? proc_fault_inject_write+0x370/0x370 [ 1902.447058][ T2567] vfs_read+0x294/0xc20 [ 1902.451975][ T2567] ? mutex_lock_io_nested+0x60/0x60 [ 1902.457597][ T2567] ? kernel_read+0x70/0x70 [ 1902.462396][ T2567] ? __fget_files+0x34f/0x380 [ 1902.467923][ T2567] ? mutex_lock_nested+0x1a/0x20 [ 1902.472873][ T2567] ? __fdget_pos+0x24e/0x2f0 [ 1902.478262][ T2567] ? ksys_read+0x72/0x2a0 [ 1902.483308][ T2567] ksys_read+0x171/0x2a0 [ 1902.487559][ T2567] ? vfs_write+0xc90/0xc90 [ 1902.492542][ T2567] ? syscall_enter_from_user_mode+0x24/0x190 [ 1902.498534][ T2567] ? syscall_enter_from_user_mode+0x24/0x190 [ 1902.505154][ T2567] do_syscall_64+0x2d/0x70 [ 1902.510384][ T2567] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1902.516287][ T2567] RIP: 0033:0x417b11 [ 1902.520650][ T2567] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1902.541130][ T2567] RSP: 002b:00007f71e0251c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 05:14:56 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) [ 1902.549933][ T2567] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417b11 [ 1902.558545][ T2567] RDX: 000000000000000f RSI: 00007f71e0251cb0 RDI: 0000000000000003 [ 1902.567268][ T2567] RBP: 00007f71e0251ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1902.575733][ T2567] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1902.584809][ T2567] R13: 00007fff90ee040f R14: 00007f71e02529c0 R15: 000000000119bf8c 05:14:56 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x1c}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) [ 1902.626620][ T2577] FAULT_INJECTION: forcing a failure. [ 1902.626620][ T2577] name failslab, interval 1, probability 0, space 0, times 0 [ 1902.692232][ T2577] CPU: 1 PID: 2577 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1902.700942][ T2577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1902.710999][ T2577] Call Trace: [ 1902.714292][ T2577] dump_stack+0x183/0x22e [ 1902.718638][ T2577] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1902.724369][ T2577] ? show_regs_print_info+0x12/0x12 [ 1902.729582][ T2577] ? __lock_acquire+0x5e40/0x5e40 [ 1902.734622][ T2577] should_fail+0x384/0x4b0 [ 1902.739054][ T2577] ? __se_sys_io_uring_setup+0x608/0x37b0 [ 1902.744780][ T2577] should_failslab+0x5/0x20 [ 1902.750106][ T2577] kmem_cache_alloc_trace+0x65/0x300 [ 1902.755399][ T2577] ? security_capable+0xb1/0xd0 [ 1902.760268][ T2577] __se_sys_io_uring_setup+0x608/0x37b0 [ 1902.765829][ T2577] ? __lock_acquire+0x5e40/0x5e40 [ 1902.770862][ T2577] ? file_end_write+0x220/0x220 [ 1902.775733][ T2577] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1902.781659][ T2577] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 1902.788429][ T2577] ? syscall_enter_from_user_mode+0x24/0x190 [ 1902.795093][ T2577] ? syscall_enter_from_user_mode+0x24/0x190 [ 1902.801485][ T2577] do_syscall_64+0x2d/0x70 [ 1902.806417][ T2577] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1902.812882][ T2577] RIP: 0033:0x45e219 [ 1902.816794][ T2577] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:14:57 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:57 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') [ 1902.837032][ T2577] RSP: 002b:00007fc7809e0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1902.845538][ T2577] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1902.853718][ T2577] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002065 [ 1902.862188][ T2577] RBP: 00007fc7809e0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1902.870807][ T2577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1902.879053][ T2577] R13: 00007ffcb1c9a79f R14: 00007fc7809e19c0 R15: 000000000119bf8c 05:14:57 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x40000000}, 0x0) 05:14:57 executing program 3 (fault-call:0 fault-nth:2): io_uring_setup(0x2065, &(0x7f0000000000)) 05:14:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x40, 0x1c}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:57 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:57 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 05:14:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x48000000}, 0x0) [ 1903.089105][ T2599] FAULT_INJECTION: forcing a failure. [ 1903.089105][ T2599] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.183429][ T2599] CPU: 1 PID: 2599 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1903.192133][ T2599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1903.202192][ T2599] Call Trace: [ 1903.205478][ T2599] dump_stack+0x183/0x22e [ 1903.209847][ T2599] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1903.215578][ T2599] ? show_regs_print_info+0x12/0x12 [ 1903.220787][ T2599] ? __might_sleep+0x100/0x100 [ 1903.225563][ T2599] ? __lock_acquire+0x5e40/0x5e40 [ 1903.230708][ T2599] ? rcu_read_lock_sched_held+0x87/0x110 [ 1903.236350][ T2599] should_fail+0x384/0x4b0 [ 1903.240786][ T2599] ? __se_sys_io_uring_setup+0x625/0x37b0 [ 1903.246508][ T2599] should_failslab+0x5/0x20 [ 1903.251014][ T2599] kmem_cache_alloc+0x62/0x2e0 [ 1903.255799][ T2599] __se_sys_io_uring_setup+0x625/0x37b0 [ 1903.261365][ T2599] ? __lock_acquire+0x5e40/0x5e40 [ 1903.266407][ T2599] ? file_end_write+0x220/0x220 [ 1903.271287][ T2599] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1903.276841][ T2599] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 1903.282839][ T2599] ? syscall_enter_from_user_mode+0x24/0x190 [ 1903.288846][ T2599] ? syscall_enter_from_user_mode+0x24/0x190 [ 1903.294838][ T2599] do_syscall_64+0x2d/0x70 [ 1903.299288][ T2599] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1903.305184][ T2599] RIP: 0033:0x45e219 [ 1903.309084][ T2599] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:14:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, 0x0, 0x40c00) 05:14:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, 0x0, 0x40c00) 05:14:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, 0x0, 0x40c00) 05:14:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:57 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x40, 0x40, 0x1c}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) [ 1903.328698][ T2599] RSP: 002b:00007fc7809e0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1903.337113][ T2599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1903.345088][ T2599] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002065 [ 1903.353061][ T2599] RBP: 00007fc7809e0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1903.361041][ T2599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1903.369018][ T2599] R13: 00007ffcb1c9a79f R14: 00007fc7809e19c0 R15: 000000000119bf8c 05:14:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x4c000000}, 0x0) 05:14:57 executing program 3 (fault-call:0 fault-nth:3): io_uring_setup(0x2065, &(0x7f0000000000)) 05:14:57 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) 05:14:57 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x1c}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:57 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x40, 0x40, 0x40, 0x1c}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:57 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x60000000}, 0x0) 05:14:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) [ 1903.771765][ T2639] __nla_validate_parse: 31 callbacks suppressed [ 1903.771781][ T2639] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:58 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/dlm-control\x00', 0x0, 0x0) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) 05:14:58 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x40, 0x1c}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) [ 1903.832913][ T2647] FAULT_INJECTION: forcing a failure. [ 1903.832913][ T2647] name failslab, interval 1, probability 0, space 0, times 0 05:14:58 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x40, 0x40, 0x40, 0x40, 0x1c}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) [ 1903.912043][ T2647] CPU: 1 PID: 2647 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1903.920773][ T2647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1903.930834][ T2647] Call Trace: [ 1903.934136][ T2647] dump_stack+0x183/0x22e [ 1903.938488][ T2647] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1903.944223][ T2647] ? show_regs_print_info+0x12/0x12 [ 1903.949433][ T2647] ? __lock_acquire+0x5e40/0x5e40 [ 1903.954472][ T2647] ? rcu_read_lock_sched_held+0x87/0x110 [ 1903.960123][ T2647] should_fail+0x384/0x4b0 [ 1903.964551][ T2647] ? __se_sys_io_uring_setup+0x711/0x37b0 [ 1903.970283][ T2647] should_failslab+0x5/0x20 [ 1903.974791][ T2647] __kmalloc+0x84/0x330 [ 1903.978962][ T2647] ? trace_kmem_cache_alloc+0x43/0xe0 [ 1903.984368][ T2647] ? kmem_cache_alloc+0x80/0x2e0 [ 1903.989333][ T2647] __se_sys_io_uring_setup+0x711/0x37b0 [ 1903.994920][ T2647] ? __lock_acquire+0x5e40/0x5e40 [ 1903.999971][ T2647] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1904.005526][ T2647] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 1904.011525][ T2647] ? syscall_enter_from_user_mode+0x24/0x190 [ 1904.017543][ T2647] ? syscall_enter_from_user_mode+0x24/0x190 [ 1904.023530][ T2647] do_syscall_64+0x2d/0x70 [ 1904.027957][ T2647] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1904.033894][ T2647] RIP: 0033:0x45e219 [ 1904.037802][ T2647] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:14:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x68000000}, 0x0) 05:14:58 executing program 0: socketpair(0x22, 0x0, 0x2, &(0x7f00000068c0)) socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) [ 1904.057414][ T2647] RSP: 002b:00007fc7809e0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1904.065833][ T2647] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1904.073826][ T2647] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002065 [ 1904.081821][ T2647] RBP: 00007fc7809e0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1904.089880][ T2647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1904.097852][ T2647] R13: 00007ffcb1c9a79f R14: 00007fc7809e19c0 R15: 000000000119bf8c 05:14:58 executing program 3 (fault-call:0 fault-nth:4): io_uring_setup(0x2065, &(0x7f0000000000)) 05:14:58 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x40, 0x40, 0x1c}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) [ 1904.163677][ T2662] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1904.201887][ T2666] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:58 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x40, 0x40, 0x40, 0x40, 0x40, 0x1c}, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:58 executing program 0: socketpair(0x23, 0xa, 0xfffffffc, &(0x7f0000000040)) 05:14:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x6c000000}, 0x0) [ 1904.326060][ T2674] FAULT_INJECTION: forcing a failure. [ 1904.326060][ T2674] name failslab, interval 1, probability 0, space 0, times 0 05:14:58 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x40, 0x40, 0x40, 0x1c}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) [ 1904.422044][ T2674] CPU: 1 PID: 2674 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1904.430743][ T2674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1904.440805][ T2674] Call Trace: [ 1904.444092][ T2674] dump_stack+0x183/0x22e [ 1904.448438][ T2674] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1904.454168][ T2674] ? show_regs_print_info+0x12/0x12 [ 1904.459382][ T2674] ? __might_sleep+0x100/0x100 [ 1904.464159][ T2674] ? __lock_acquire+0x5e40/0x5e40 [ 1904.469213][ T2674] should_fail+0x384/0x4b0 [ 1904.473639][ T2674] ? percpu_ref_init+0xce/0x300 [ 1904.478497][ T2674] should_failslab+0x5/0x20 [ 1904.483002][ T2674] kmem_cache_alloc_trace+0x65/0x300 [ 1904.488296][ T2674] ? __se_sys_io_uring_setup+0x711/0x37b0 [ 1904.494038][ T2674] percpu_ref_init+0xce/0x300 [ 1904.498728][ T2674] ? trace_io_uring_create+0x250/0x250 [ 1904.504197][ T2674] __se_sys_io_uring_setup+0x780/0x37b0 [ 1904.509761][ T2674] ? __lock_acquire+0x5e40/0x5e40 [ 1904.514812][ T2674] ? __x64_sys_io_uring_setup+0x60/0x60 05:14:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) [ 1904.520372][ T2674] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 1904.526389][ T2674] ? syscall_enter_from_user_mode+0x24/0x190 [ 1904.532376][ T2674] ? syscall_enter_from_user_mode+0x24/0x190 [ 1904.538364][ T2674] do_syscall_64+0x2d/0x70 [ 1904.542785][ T2674] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1904.548687][ T2674] RIP: 0033:0x45e219 [ 1904.552585][ T2674] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:14:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:58 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) [ 1904.572201][ T2674] RSP: 002b:00007fc7809e0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1904.580615][ T2674] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1904.588588][ T2674] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002065 [ 1904.596560][ T2674] RBP: 00007fc7809e0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1904.604535][ T2674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1904.612514][ T2674] R13: 00007ffcb1c9a79f R14: 00007fc7809e19c0 R15: 000000000119bf8c [ 1904.658732][ T2685] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:59 executing program 3 (fault-call:0 fault-nth:5): io_uring_setup(0x2065, &(0x7f0000000000)) 05:14:59 executing program 0: socketpair(0x0, 0xa, 0xfffffffc, &(0x7f0000000040)) 05:14:59 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x7, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x74000000}, 0x0) 05:14:59 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x40, 0x40, 0x40, 0x40, 0x1c}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) [ 1904.911894][ T2708] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1904.926652][ T2712] FAULT_INJECTION: forcing a failure. [ 1904.926652][ T2712] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1904.951090][ T2713] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 05:14:59 executing program 4: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null={0x40, 0x40, 0x40, 0x40, 0x40, 0x1c}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:59 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x7, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) 05:14:59 executing program 0: socketpair(0x0, 0xa, 0xfffffffc, &(0x7f0000000040)) [ 1905.035723][ T2712] CPU: 1 PID: 2712 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1905.044419][ T2712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1905.054486][ T2712] Call Trace: [ 1905.057864][ T2712] dump_stack+0x183/0x22e [ 1905.062205][ T2712] ? log_buf_vmcoreinfo_setup+0x45d/0x45d [ 1905.067939][ T2712] ? show_regs_print_info+0x12/0x12 [ 1905.073229][ T2712] ? __might_sleep+0x100/0x100 [ 1905.078007][ T2712] ? __lock_acquire+0x5e40/0x5e40 [ 1905.083050][ T2712] should_fail+0x384/0x4b0 [ 1905.087475][ T2712] prepare_alloc_pages+0x1c5/0x5b0 [ 1905.092606][ T2712] __alloc_pages_nodemask+0x129/0x5a0 [ 1905.098002][ T2712] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 1905.103566][ T2712] ? alloc_pages_current+0x2e5/0x520 [ 1905.109405][ T2712] __get_free_pages+0x8/0x30 [ 1905.114000][ T2712] __se_sys_io_uring_setup+0x15d0/0x37b0 [ 1905.119671][ T2712] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1905.125634][ T2712] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 1905.132025][ T2712] ? syscall_enter_from_user_mode+0x24/0x190 [ 1905.138548][ T2712] ? syscall_enter_from_user_mode+0x24/0x190 [ 1905.145391][ T2712] do_syscall_64+0x2d/0x70 [ 1905.149816][ T2712] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1905.155940][ T2712] RIP: 0033:0x45e219 [ 1905.159835][ T2712] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:14:59 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0)='nl80211\x00') sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000009c0)={0x0, 0xfffffffffffffc93, &(0x7f0000000980)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0xffffffffffffffef}]}, 0x28}, 0x1, 0x7a000000}, 0x0) [ 1905.179456][ T2712] RSP: 002b:00007fc7809e0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1905.187875][ T2712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1905.196268][ T2712] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002065 [ 1905.204785][ T2712] RBP: 00007fc7809e0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1905.212765][ T2712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1905.220749][ T2712] R13: 00007ffcb1c9a79f R14: 00007fc7809e19c0 R15: 000000000119bf8c 05:14:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00') sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, r1, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x2000001c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x40c00) 05:14:59 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast={0xa2, 0xa6, 0xa8, 0x1c}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x40) [ 1905.352114][ T2729] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1905.409786][ T2732] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1905.653064][ T2712] general protection fault, probably for non-canonical address 0xdffffc0000000022: 0000 [#1] PREEMPT SMP KASAN [ 1905.664789][ T2712] KASAN: null-ptr-deref in range [0x0000000000000110-0x0000000000000117] [ 1905.673192][ T2712] CPU: 1 PID: 2712 Comm: syz-executor.3 Not tainted 5.11.0-rc3-syzkaller #0 [ 1905.681858][ T2712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1905.691905][ T2712] RIP: 0010:__se_sys_io_uring_setup+0x2abb/0x37b0 [ 1905.698320][ T2712] Code: c0 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c5 31 de ff 41 be 14 01 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 46 06 00 00 41 80 0e 01 48 8b 7c 24 30 e8 [ 1905.718072][ T2712] RSP: 0018:ffffc9001734fca0 EFLAGS: 00010007 [ 1905.724116][ T2712] RAX: 0000000000000022 RBX: ffff88804fd110c0 RCX: 0000000000000001 [ 1905.732098][ T2712] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9001734fb80 [ 1905.740042][ T2712] RBP: ffffc9001734ff38 R08: dffffc0000000000 R09: 0000000000000003 [ 1905.748006][ T2712] R10: fffff52002e69f71 R11: 0000000000000004 R12: 0000000000000001 [ 1905.755956][ T2712] R13: dffffc0000000000 R14: 0000000000000114 R15: 00000000fffffff4 [ 1905.763905][ T2712] FS: 00007fc7809e1700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1905.772810][ T2712] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1905.779368][ T2712] CR2: 00007f9356dcf000 CR3: 000000001b870000 CR4: 00000000001506e0 [ 1905.787350][ T2712] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1905.795299][ T2712] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1905.803250][ T2712] Call Trace: [ 1905.806520][ T2712] ? __x64_sys_io_uring_setup+0x60/0x60 [ 1905.812046][ T2712] ? lockdep_hardirqs_on_prepare+0x3e2/0x750 [ 1905.818022][ T2712] ? syscall_enter_from_user_mode+0x24/0x190 [ 1905.823998][ T2712] ? syscall_enter_from_user_mode+0x24/0x190 [ 1905.829952][ T2712] do_syscall_64+0x2d/0x70 [ 1905.834349][ T2712] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1905.840230][ T2712] RIP: 0033:0x45e219 [ 1905.844095][ T2712] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1905.863674][ T2712] RSP: 002b:00007fc7809e0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1905.872069][ T2712] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1905.880020][ T2712] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002065 [ 1905.887976][ T2712] RBP: 00007fc7809e0ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1905.895920][ T2712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1905.903899][ T2712] R13: 00007ffcb1c9a79f R14: 00007fc7809e19c0 R15: 000000000119bf8c [ 1905.911851][ T2712] Modules linked in: [ 1905.915723][ T2712] ---[ end trace 00ff3586852ea6cb ]--- [ 1905.921147][ T2712] RIP: 0010:__se_sys_io_uring_setup+0x2abb/0x37b0 [ 1905.927533][ T2712] Code: c0 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 c5 31 de ff 41 be 14 01 00 00 4c 03 33 4c 89 f0 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 46 06 00 00 41 80 0e 01 48 8b 7c 24 30 e8 [ 1905.947205][ T2712] RSP: 0018:ffffc9001734fca0 EFLAGS: 00010007 [ 1905.953253][ T2712] RAX: 0000000000000022 RBX: ffff88804fd110c0 RCX: 0000000000000001 [ 1905.961207][ T2712] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9001734fb80 [ 1905.969152][ T2712] RBP: ffffc9001734ff38 R08: dffffc0000000000 R09: 0000000000000003 [ 1905.977108][ T2712] R10: fffff52002e69f71 R11: 0000000000000004 R12: 0000000000000001 [ 1905.985060][ T2712] R13: dffffc0000000000 R14: 0000000000000114 R15: 00000000fffffff4 [ 1905.993005][ T2712] FS: 00007fc7809e1700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 1906.001908][ T2712] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1906.008469][ T2712] CR2: 00007f9356dcf000 CR3: 000000001b870000 CR4: 00000000001506e0 [ 1906.016413][ T2712] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1906.024355][ T2712] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1906.032303][ T2712] Kernel panic - not syncing: Fatal exception [ 1906.039062][ T2712] Kernel Offset: disabled [ 1906.043398][ T2712] Rebooting in 86400 seconds..