# https://syzkaller.appspot.com/bug?id=ad69d1c3f76bf1db050797e8f0a19612804da71e
# See https://goo.gl/kgGztJ for information about syzkaller reproducers.
#{"repeat":true,"procs":6,"slowdown":1,"sandbox":"none","tun":true,"close_fds":true,"wifi":true,"ieee802154":true,"tmpdir":true}
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002300)={0x8b4, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1c}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3d}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}], @NL80211_ATTR_CSA_IES={0x44, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x8b, 0x2, 0x1, 0x3, 0x7f, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x5, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x9, 0xffff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x4, 0x6, 0x8, 0x8000, 0x8001]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x80, 0xaa, 0x5, 0x1, 0x4]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x41}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CSA_IES={0x7f4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x12, 0xbb, [0x1ff, 0x200, 0x9, 0x1, 0x8, 0x100, 0x4]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x129, 0x7f, [@fast_bss_trans={0x37, 0x83, {0x81, 0x5, "0f00a8f4cf6039ac4b6ab2458e3f3616", "6cf834332eaed8935d2291832f75acee6c4dcc573f4a0f4e9457cc01316ec307", "a17276668d73d1091fa847db98b0a6c9181c9009bedf7389088aab36803c46fc", [{0x2}, {0x3}, {0x1, 0x27, "372ee5f542cd5a3e08c3069283d295a4b09c978ec5a4839a7a14c680ec4a5ade0db4eae04986e9"}, {0x1}, {0x1}]}}, @preq={0x82, 0x72, @not_ext={{0x1, 0x1, 0x1}, 0xa, 0x40, 0x401, @device_a, 0x20, "", 0x7, 0x4, 0x8, [{{}, @device_b, 0x2}, {{}, @device_b, 0x2}, {{}, @broadcast, 0x6}, {{0x1, 0x0, 0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @broadcast, 0x3}, {{}, @broadcast, 0x1ff}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}, {{0x1}, @broadcast, 0xffffffff}]}}, @ibss={0x6, 0x2, 0x600}, @erp={0x2a, 0x1}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}, @random={0x20}, @peer_mgmt={0x75, 0x16, {0x1, 0xff, @val=0x5, @void, @val="dafd1d8e983f3db738f04d8a95c466fe"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x118, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x51, 0x2, "56e207ed71a2f6476d2f0e308a2887ec561d7982a38276de8b4ecd1d13f32f8acfc15c2edcff6288049f3734a0bd69616b832563091e86a1904fb6654b97bb5e64fbcf14d7c5e2ae5af0154a61"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbb, 0x3, "402a48d54fcba40e1168bdbc791cb6aa32fdfa8a462aed8aaf72880410955b7b2e0a69a1449d8a8836b262d883775206a3fd9c488071e9f1a1da973b13c35c8038ed7f716fa60288fbace3bfd5a43a29dcbad1f83b79e369f17ca7ad8de5361b5bc016918dc19d1f973540fff9bbf3f7859e64fdc3a36595874655de534230d986f1433a252c784aa9da16b50c5556a68cad3ccf78c94d9f1242f0131309ddc1b4736ad131fe5c1c20603d8d98eb14d1caea7ae1ababd2"}]}, @NL80211_ATTR_BEACON_TAIL={0xdd, 0xf, [@cf={0x4, 0x6, {0x2, 0x80, 0x6, 0x8}}, @dsss={0x3, 0x1, 0x3c}, @link_id={0x65, 0x12, {@from_mac=@device_b, @device_a, @broadcast}}, @prep={0x83, 0x1f, @not_ext={{}, 0x8, 0x26, @device_a, 0x8, "", 0x4, 0x6, @device_b, 0xdd}}, @mesh_chsw={0x76, 0x6, {0x80, 0x6, 0x8, 0x1}}, @ht={0x2d, 0x1a, {0x20, 0x0, 0x5, 0x0, {0x100000001, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0xffff, 0x52}}, @preq={0x82, 0x6d, @ext={{}, 0xc8, 0x3, 0x40, @broadcast, 0x3, @broadcast, 0x3, 0x1, 0x7, [{{0x1}, @device_a, 0x200}, {{0x0, 0x0, 0x1}, @device_a, 0x1}, {{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @device_a, 0x7}, {{0x1}, @device_a, 0x8002}, {{0x1, 0x0, 0x1}, @device_a, 0x800}, {{}, @device_a, 0x5}]}}, @chsw_timing={0x68, 0x4, {0xb05c, 0x8}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x1e, 0x80, [@mic={0x8c, 0x18, {0xbd2, "570cd8128826", @long="1c8c96ab0bded8dfe52dba3f6d410402"}}]}, @NL80211_ATTR_BEACON_TAIL={0x9, 0xf, [@supported_rates, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_BEACON_HEAD={0x67, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @device_a, @initial, {0x9, 0x20}}, @ver_80211n={0x0, 0x1f, 0x1, 0x2, 0x0, 0x2, 0x1}}, 0x2, @random=0x6, 0x5002, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x6, 0x1}, {0x48}, {0x36, 0x1}, {0x5, 0x1}, {0x6c}, {0x9, 0x1}, {0x1b, 0x1}]}, @val={0x3, 0x1, 0x2c}, @val={0x4, 0x6, {0x2, 0x1, 0x1, 0x1ff}}, @val={0x6, 0x2, 0x2}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xff, 0x8, 0x6, 0x4}}, [{0xdd, 0x6, "cb30e3bc0db0"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x7ff, 0x2]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x16c, 0x80, [@perr={0x84, 0x115, {0x1f, 0x11, [@ext={{}, @device_b, 0x80, @device_a, 0x2a}, @ext={{}, @broadcast, 0x99c, @broadcast, 0x2}, @not_ext={{}, @device_a, 0x8}, @not_ext={{}, @device_a, 0x0, "", 0x7}, @ext={{}, @device_a, 0x1, @broadcast, 0x2f}, @not_ext={{}, @device_a, 0x1, "", 0x16}, @ext={{}, @device_a, 0x7, @broadcast, 0x3c}, @not_ext={{}, @broadcast, 0x4}, @ext={{}, @broadcast, 0xfffffffc, @device_b, 0x21}, @not_ext={{}, @device_a, 0x10000, "", 0xe}, @not_ext={{}, @device_b, 0x3f, "", 0x33}, @not_ext={{}, @broadcast, 0xfb4f, "", 0x28}, @ext={{}, @broadcast, 0x1ff, @broadcast, 0x10}, @ext={{}, @device_a, 0x7fff, @device_a, 0x40}, @not_ext={{}, @device_b, 0x2, "", 0x3d}, @ext={{}, @broadcast, 0x5, @device_b, 0x2c}, @ext={{}, @device_b, 0x3, @broadcast, 0x42}]}}, @perr={0x84, 0x4f, {0x3f, 0x5, [@not_ext={{}, @device_b, 0x0, "", 0x3}, @not_ext={{}, @broadcast, 0x28, "", 0x31}, @ext={{}, @device_a, 0x0, @device_b}, @not_ext={{}, @device_a, 0x1, "", 0x1f}, @ext={{}, @broadcast, 0x99800000, @device_a, 0x3f}]}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xb1, 0x80, [@prep={0x83, 0x25, @ext={{}, 0x8, 0x0, @broadcast, 0x8000, @device_a, 0x2, 0x4, @device_a, 0x7aae}}, @cf={0x4, 0x6, {0x6, 0x80, 0x8, 0x9}}, @link_id={0x65, 0x12, {@initial, @device_b}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @prep={0x83, 0x1f, @not_ext={{}, 0x14, 0x3, @broadcast, 0x2, "", 0xe443, 0x9, @device_b, 0x8}}, @prep={0x83, 0x25, @ext={{}, 0x5, 0x5, @device_a, 0xc, @broadcast, 0x7fffffff, 0xfffff481, @device_b, 0xffff57e8}}, @ssid={0x0, 0x1d, @random="b73c73e234d0fc21c59833e72acdc91507ebfc5391f2406c8167acb19f"}]}, @NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_HEAD={0x89, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x80}, @device_b, @device_b, @random="715ba9f49e17", {0x6, 0xd8}}, 0xb0a, @default, 0x1440, @val, @val={0x1, 0x6, [{0x56}, {0x9, 0x1}, {0x18, 0x1}, {0x6, 0x1}, {0x18, 0x1}, {0xb, 0x1}]}, @void, @val={0x4, 0x6, {0x7f, 0x5, 0x3, 0x1b}}, @void, @val={0x5, 0x3, {0x7f, 0x65, 0x2}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x7, 0x99, 0xed}}, @val={0x2d, 0x1a, {0x800, 0x1, 0x0, 0x0, {0x27df3fb8, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x8, 0x2}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x6, "5622e956bb0c"}, {0xdd, 0x6, "62d1fbe63fd2"}, {0xdd, 0xb, "6b2d58f54cdc9af06be4f5"}]}}, @NL80211_ATTR_IE={0x6e, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @mesh_chsw={0x76, 0x6, {0x5, 0x6, 0x40, 0x401}}, @tim={0x5, 0x3, {0x9a, 0x1d, 0x7b}}, @prep={0x83, 0x25, @ext={{}, 0x40, 0x7, @broadcast, 0xffffffff, @broadcast, 0x4, 0xd6, @device_b, 0x7ffffffe}}, @preq={0x82, 0x2b, @ext={{0x1}, 0x1f, 0x8, 0x81, @broadcast, 0x3, @device_a, 0x6, 0x1, 0x1, [{{}, @broadcast, 0x8}]}}, @peer_mgmt={0x75, 0x4, {0x0, 0x32, @void, @void, @void}}]}, @NL80211_ATTR_PROBE_RESP={0x4}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x9, 0x5, 0xffff, 0x6, 0x2]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0xdd62, 0x3]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x22, 0x7f, [@ht={0x2d, 0x1a, {0x20, 0x3, 0x5, 0x0, {0x400, 0x3ff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x300, 0x9, 0x9b}}, @random={0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x89, 0xe, {@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @from_mac=@broadcast, {0x1, 0x3}}}, 0xfffffffffffffffc, @random, 0x2540, @void, @void, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x11, {0x0, 0xbb, 0x36, "af70baf3b04a049c87ac8e5f53d8"}}, @val={0x25, 0x3, {0x0, 0xb2, 0x1f}}, @void, @val={0x3c, 0x4, {0x1, 0x1, 0x2, 0x1f}}, @val={0x2d, 0x1a, {0x2000, 0x0, 0x0, 0x0, {0x867, 0x5, 0x0, 0x81, 0x0, 0x1, 0x1}, 0x400, 0x2, 0x5}}, @void, @void, @val={0x76, 0x6, {0x3f, 0xf8, 0x42, 0x5}}, [{0xdd, 0x6, "c2330a589a82"}, {0xdd, 0x6, "48120b7bd985"}, {0xdd, 0x6, "ffd3f5db2cef"}]}}]]}, @NL80211_ATTR_CSA_IES={0x28, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x7, 0x800, 0x6798]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x11, 0xf, [@random={0x3f}, @chsw_timing={0x68, 0x4, {0x5, 0xff}}, @tim={0x5, 0x3, {0x8, 0xdb}}]}, @NL80211_ATTR_PROBE_RESP={0x4}]]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x3b}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)