mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
------------[ cut here ]------------
!sta || !ap_sta
WARNING: net/mac80211/tdls.c:611 at ieee80211_tdls_add_setup_cfm_ies net/mac80211/tdls.c:611 [inline], CPU#0: syz.0.596/6699
WARNING: net/mac80211/tdls.c:611 at ieee80211_tdls_add_ies net/mac80211/tdls.c:762 [inline], CPU#0: syz.0.596/6699
WARNING: net/mac80211/tdls.c:611 at ieee80211_tdls_build_mgmt_packet_data+0x2ea1/0x4050 net/mac80211/tdls.c:984, CPU#0: syz.0.596/6699
Modules linked in:
CPU: 0 UID: 0 PID: 6699 Comm: syz.0.596 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:ieee80211_tdls_add_setup_cfm_ies net/mac80211/tdls.c:611 [inline]
RIP: 0010:ieee80211_tdls_add_ies net/mac80211/tdls.c:762 [inline]
RIP: 0010:ieee80211_tdls_build_mgmt_packet_data+0x2ea1/0x4050 net/mac80211/tdls.c:984
Code: fc ff df e9 a1 fe ff ff e8 4c 0a 88 f6 90 0f 0b 90 e9 78 fe ff ff e8 3e 0a 88 f6 90 0f 0b 90 e9 85 fe ff ff e8 30 0a 88 f6 90 <0f> 0b 90 e9 77 fe ff ff e8 22 0a 88 f6 48 c7 c7 30 99 eb 8f 4c 89
RSP: 0018:ffffc900032a7080 EFLAGS: 00010293
RAX: ffffffff8b3da4c0 RBX: ffff888031090e00 RCX: ffff88802c341e80
RDX: 0000000000000000 RSI: ffffffff8e16b1b3 RDI: ffff88802c341e80
RBP: ffffc900032a7200 R08: 0000000000000000 R09: 000000000000000c
R10: 000000000000000c R11: 0000000000000000 R12: ffff888031092610
R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888031088ec0
FS:  0000555594b4c500(0000) GS:ffff888125457000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00002000000021c0 CR3: 000000007eb3e000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 ieee80211_tdls_prep_mgmt_packet+0x3a4/0x820 net/mac80211/tdls.c:1058
 ieee80211_tdls_mgmt+0x32e/0x840 net/mac80211/tdls.c:1299
 rdev_tdls_mgmt net/wireless/rdev-ops.h:932 [inline]
 nl80211_tdls_mgmt+0x4da/0x7a0 net/wireless/nl80211.c:13723
 genl_family_rcv_msg_doit+0x22a/0x330 net/netlink/genetlink.c:1114
 genl_family_rcv_msg net/netlink/genetlink.c:1194 [inline]
 genl_rcv_msg+0x61c/0x7a0 net/netlink/genetlink.c:1209
 netlink_rcv_skb+0x232/0x4b0 net/netlink/af_netlink.c:2550
 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1218
 netlink_unicast_kernel net/netlink/af_netlink.c:1318 [inline]
 netlink_unicast+0x80f/0x9b0 net/netlink/af_netlink.c:1344