cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)

03:39:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:39:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0xfffffffe)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="50000000080211000001080211000000312f82860800000000000000000086bb640001000006000002020202010882848b960c101824c526b0ac747c510981e0f7e936f9"], 0x36)

03:39:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:39:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:39:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:39:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:39:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18, <r4=>r0}, './file0/file0\x00'})
mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9, 0x10, r4, 0x9)
write$P9_RSETATTR(r3, &(0x7f0000000640)={0x7}, 0x7)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x4c0, r5, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x36}, @NL80211_ATTR_REG_RULES={0x110, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3ff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x77ee}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffff57}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x188a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd451}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_RULES={0x198, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5c}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffff2d2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x200}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3fde}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x20}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2b}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffff001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x587}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffff7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x36db}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8e53}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x44f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}]}]}, @NL80211_ATTR_REG_RULES={0x168, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5bb5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x72}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffd}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1ff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x800}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x79}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xffffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffa}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xa30f}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x90000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x96}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x35}, @NL80211_ATTR_REG_RULES={0x74, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x100}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x20}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x401}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x20004854}, 0x44041)

[ 2173.672294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.687067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.709342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.748253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.756281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.761575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.779922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.784482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.800406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.817760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2173.835038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2173.908076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:39:18 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)

03:39:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2174.118300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:39:18 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x5, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2174.193291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2174.208709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2174.238040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2174.241463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2174.256227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2174.260151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:39:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:39:18 executing program 4:
ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000000)={0x7ff, 0x5})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2174.385050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2174.411383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2174.501289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2174.522705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2174.574328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2174.828243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2174.834055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2176.888576] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2176.894180] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2176.896666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2176.904073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2176.907828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2176.952262] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2176.955648] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2176.957451] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2176.961119] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2176.964254] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2178.925856] Bluetooth: hci2: command tx timeout
[ 2178.991039] Bluetooth: hci7: command tx timeout
[ 2180.974931] Bluetooth: hci2: command tx timeout
[ 2181.039262] Bluetooth: hci7: command tx timeout
[ 2183.021806] Bluetooth: hci2: command tx timeout
[ 2183.085804] Bluetooth: hci7: command tx timeout
[ 2185.069902] Bluetooth: hci2: command tx timeout
[ 2185.133945] Bluetooth: hci7: command tx timeout
[ 2187.526296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2187.526911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2187.605405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2187.606040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2187.730480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2187.731159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2187.788764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2187.789376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2187.827631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2187.835976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2187.967640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:40 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))

03:39:40 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x6, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:39:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:39:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:39:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:39:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x844, 0x7fffffff}}, './file0\x00'})
syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:39:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300ce7e2c10849396fce16e1accfc591dad3681966baba57c8f681576a5dcb92cc713fcf4e408928d4d46fb33810fc77a07e2fac1fa4467c4a92358dfe4eb33c8ac291487f163f68290c9a944608f3bebca70b758c2e8af8bc29b9051e1d5228141bfe0f404fb66baf1b0f6a9c5c58bcd4fa14cc56fe65ca09326c42916f2c740b457368c988d7498e30100000063e541e5cdbdcf25484ad4964a67", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_a, @broadcast, @from_mac=@broadcast, {0x0, 0xffd}}, 0x0, @default, 0x842, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x2, 0x0, {0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x6, 0x3, 0x30}}, @void, @void, @void}, 0x48)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r3=>r0, {0x1}}, './file0\x00'})
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x1000, 0x0, 0x0, 0x0, {0x2, 0x5, 0x0, 0x3f7, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0x9, 0x88}}, @void, @void}, 0x52)

03:39:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

[ 2196.977289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2196.988157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.004630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.011700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.021404] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2197.029562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.082794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.086515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.104428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.114596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.134600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.146717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2197.210995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.218554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.294940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:41 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x7, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:39:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:39:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2197.359292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.369383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.370466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:39:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:39:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:39:41 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)

[ 2197.516375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.527426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r5, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2197.586558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.598606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x8041)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e)

[ 2197.665763] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.686716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.798600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2197.808267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2198.169513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000100)=""/207, &(0x7f0000000000)=0xcf)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:39:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:39:52 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)

03:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r5, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:39:52 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x8, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:39:52 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:39:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:39:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2208.490354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2208.504312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2208.509205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2208.588415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2208.645412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2208.711109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:52 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:39:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r5, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:39:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2208.940379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:53 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

[ 2209.123416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:39:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:39:53 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:39:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:39:53 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2212.021690] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2212.027699] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2212.030670] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2212.038599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2212.042715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2212.096499] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2212.102921] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2212.104639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2212.118171] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2212.121292] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2212.128033] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2212.133117] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2212.134830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2212.139387] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2212.144895] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2214.125821] Bluetooth: hci0: command tx timeout
[ 2214.190039] Bluetooth: hci7: command tx timeout
[ 2214.190298] Bluetooth: hci3: command tx timeout
[ 2216.174826] Bluetooth: hci0: command tx timeout
[ 2216.238071] Bluetooth: hci3: command tx timeout
[ 2216.238924] Bluetooth: hci7: command tx timeout
[ 2218.221802] Bluetooth: hci0: command tx timeout
[ 2218.285801] Bluetooth: hci7: command tx timeout
[ 2218.285839] Bluetooth: hci3: command tx timeout
[ 2220.269889] Bluetooth: hci0: command tx timeout
[ 2220.333881] Bluetooth: hci7: command tx timeout
[ 2220.335284] Bluetooth: hci3: command tx timeout
[ 2229.886204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2229.887422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2229.984170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2229.984884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2230.260868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2230.270807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2230.724413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2230.725072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2230.804453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2230.805439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2231.083905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2231.091680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2231.401938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2231.406795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2231.407868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2231.465124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2231.466276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2231.823647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2231.832840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2232.140139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2232.144411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:40:27 executing program 2:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:40:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:40:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:40:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x3f, 0x4)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000c02edfce97f84184e63cafae6c128f", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x7e1, @any, 0x6}, 0xe)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:40:27 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x9, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:40:27 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:40:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:40:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2243.266626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2243.271630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2243.324701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2243.330263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2243.339247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:40:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2243.380845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:40:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:40:27 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:40:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2243.659416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:40:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:40:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:40:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x200, 0x0, 0x0, {{}, {@val={0x0, 0x3, r2}, @val={0x0, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_MESH_ID]}, 0xfffffffffffffd68}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2243.933695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2243.950154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2244.263930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2246.393579] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2246.395962] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2246.400167] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2246.405673] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2246.412180] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2246.463059] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2246.465231] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2246.469063] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2246.474224] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2246.477480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2246.542427] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 2246.548051] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 2246.550183] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 2246.560970] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 2246.563175] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 2248.493875] Bluetooth: hci2: command tx timeout
[ 2248.495125] Bluetooth: hci3: command tx timeout
[ 2248.621875] Bluetooth: hci7: command tx timeout
[ 2250.541898] Bluetooth: hci3: command tx timeout
[ 2250.541940] Bluetooth: hci2: command tx timeout
[ 2250.671796] Bluetooth: hci7: command tx timeout
[ 2252.589806] Bluetooth: hci2: command tx timeout
[ 2252.589848] Bluetooth: hci3: command tx timeout
[ 2252.717802] Bluetooth: hci7: command tx timeout
[ 2254.637805] Bluetooth: hci3: command tx timeout
[ 2254.638797] Bluetooth: hci2: command tx timeout
[ 2254.765799] Bluetooth: hci7: command tx timeout
[ 2260.424809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2260.425369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2260.489659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2260.490560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2260.804818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2260.812979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2261.500682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2261.501284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2261.553107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2261.553657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2261.751786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2261.759247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2262.065334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2263.077847] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2263.078840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2263.128902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2263.129934] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2263.482946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:40:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:40:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:40:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xb, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:40:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r9=>0x0})
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x24004804)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:40:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:40:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:40:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2273.049592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:40:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2273.057126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:40:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2273.137362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:40:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2273.141079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2273.177264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:40:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:40:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:40:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:40:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:40:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:40:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2273.367637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2273.486824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2273.493548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:41:06 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x6bf}}, './file0\x00'})
sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x87}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x40044)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dc13ffffffff65666768060000ef00000000000009ef09"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
recvmsg$unix(r3, &(0x7f00000028c0)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000002840)=[{&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000600)=""/192, 0xc0}, {&(0x7f0000000740)=""/221, 0xdd}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x6, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, <r4=>0x0}}}], 0x20}, 0x12141)
setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), &(0x7f0000002900)=@v3={0x3000000, [{0x1ff, 0x5}, {0x1, 0x6}], r4}, 0x18, 0x3)

03:41:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:41:06 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:41:06 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:41:06 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:41:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:41:06 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xf, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:41:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2282.634063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:41:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2282.653548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2282.668859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:41:06 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:41:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:41:06 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2282.768051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:41:06 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="3300000008021100000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c1218243e694246ebf7f1b5af30ebdda83d747128ef303307000000000000006c0a2f3b3d4043db8f9627bd0ed40dab221775169ecfd201e3f15e199ef7ca43591ec59e0fdf9ede7ba719d42a644aca781c2a3756651130fa62bbd69b298cda3d61941aeffd6bf241f8b850016161da338abc30342775146867376f446ca9f9ed5ba9bee38addd966cc7e23be6ab9aff7bf9f6cfcca092ce4d9f5d5ec1b612f7510e24b5788dd4a12d3bea4a1b4586a05eb05c514eb"], 0x36)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:41:06 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})

03:41:06 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:41:06 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2282.970168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2285.432856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2285.435265] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2285.443195] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2285.457909] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2285.462554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2287.533854] Bluetooth: hci2: command tx timeout
[ 2289.582080] Bluetooth: hci2: command tx timeout
[ 2291.629855] Bluetooth: hci2: command tx timeout
[ 2293.678847] Bluetooth: hci2: command tx timeout
[ 2304.484924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2304.486066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2304.573903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2304.575211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2304.916157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2304.926197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2305.235288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2305.240455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:41:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)

03:41:41 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:41:41 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xf0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:41:41 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:41:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:41:41 executing program 6:
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

03:41:41 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x180, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x8000}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0xffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x401}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xcf3a}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x7f}, {0x8, 0x15, 0x1ff}}]}, 0x180}, 0x1, 0x0, 0x0, 0x44800}, 0xc800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x79}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r3 = signalfd(r0, &(0x7f0000000000)={[0x11b]}, 0x8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r5, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x4f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x800)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:41:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2317.313159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2317.416472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2317.418672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2317.427371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:41:41 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:41:41 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:41:41 executing program 6:
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

03:41:41 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)

03:41:41 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:41:41 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2317.799286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:41:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:41:41 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

[ 2318.037428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:41:42 executing program 1:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2320.569077] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2320.573143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2320.576368] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2320.582241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2320.586105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2322.606857] Bluetooth: hci2: command tx timeout
[ 2324.653903] Bluetooth: hci2: command tx timeout
[ 2326.701919] Bluetooth: hci2: command tx timeout
[ 2328.749891] Bluetooth: hci2: command tx timeout
[ 2334.256229] Bluetooth: hci0: command 0x0406 tx timeout
[ 2337.582710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2337.583690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2337.633334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2337.633993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2337.858970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2337.866140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2338.180271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2340.602050] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2340.604840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2340.606659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2340.612168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2340.617023] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2342.637852] Bluetooth: hci2: command tx timeout
[ 2344.686913] Bluetooth: hci2: command tx timeout
[ 2346.733841] Bluetooth: hci2: command tx timeout
[ 2348.781941] Bluetooth: hci2: command tx timeout
[ 2359.436239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2359.437703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2359.510496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2359.511642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2359.901564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2359.911994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2360.221081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2371.104164] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2371.109352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2371.119863] Bluetooth: hci7: command 0x0406 tx timeout
[ 2371.120353] Bluetooth: hci3: command 0x0406 tx timeout
[ 2371.132530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2371.176908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2371.186216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:42:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:42:35 executing program 6:
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

03:42:35 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:42:35 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:42:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r6, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:42:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:42:35 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="72c75c6732a909a5"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000007b4983ff3f6c03e4dd34dd0b316e9ffc10cdbf509a9a118578747261c8b45831cef23ad2788ea19bdb4b3ed95d501bd4a2519498d2ff5244b8446719062a5b151706ed72b34c428bdbde7c35d4e41a30f2129f16e9a512e2b9bff81b6378666b7881a3f3049e978554e93d702a92fc9d4348b6cad7bc0d29b609a29c7c8e0a3d33536a28b3161af312c17f0153f73450742be6d16ca742af1dfcf3db4613b4ce07da08a5300f92eec12b0edae9a5adb2a8547a9f3066e55806bdcca9d7e791e68ea07462815c6a762c675b9bddf05ff5c532829adb415249b38a6a0138e5f3a4cf3c6ad9a444892d6edd91da6d827e67282dd3c42d", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11112a00dd0b6000000000000000695b40dac6cab2e3c45eb293b69d1858775935130272770000000002020202020000"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x40, 0x9}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void}, 0x3e)
sendto(r0, &(0x7f0000000400)="fe39c2254ee21a6130940041853d679d7d545798c54ff826e04cea7f421e9e68093df1e47963b619f025947a461d6138f6eaa58a02db9d0c5ec832d23891ca43bd65fcb05111e545db5eb8233babfcee99efcbcee4e23494f4ae8cd9ffab2000ddfcfbab89d65ff9f95376a6e914b9e1e93be6fea86c5c86e79f54426027e900a62a514830da246dee627c95acf3ecd10b72de5175dd0c79aaef2028d25d626148553518752e22a0183878d111b40276eba86102ec952fef078f2ab8b074a9278afac2204e02b34e97c7002ff10280da4163ea1c0c79188d08278c00db332806511f02f144ff8f", 0xe7, 0x20000014, &(0x7f0000000500)=@llc={0x1a, 0x10f, 0x80, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x80)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x57}, @void, @val={0xc, 0x99, {0xffff, 0x20}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000000)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000740)='/sys/module/nfs', 0x6141, 0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000880)={'erspan0\x00', <r5=>0x0, 0x20, 0x7860, 0x9, 0x7, {{0x2d, 0x4, 0x1, 0x1, 0xb4, 0x66, 0x0, 0xfc, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@generic={0x86, 0xa, "0c8eac74ed8648ec"}, @end, @cipso={0x86, 0x70, 0x0, [{0x5, 0xa, "e3defd35a36f9d36"}, {0x1, 0xc, "51168d0d926ab761f6ec"}, {0x6, 0xf, "64b63c9db5f30244a195046963"}, {0x1, 0x12, "db4882eb9b7726140d3a6a5f62169789"}, {0x5, 0xf, "e34ab6dff29e093e8bf55bd82f"}, {0x1, 0x2}, {0x1, 0x5, "97dda8"}, {0x7, 0xd, "908cf5e2884003fb229816"}, {0x5, 0x10, "938d0ca62a0dad88c0924aeb8c2d"}]}, @lsrr={0x83, 0xb, 0x19, [@broadcast, @loopback]}, @ssrr={0x89, 0x7, 0xe1, [@remote]}, @rr={0x7, 0x13, 0x7c, [@local, @loopback, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1]}]}}}}})
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000640)={0x7}, 0x7)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000f00)={0x188, 0x17, 0xa, 0x801, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x130, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3f}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000000}, 0x20018084)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'gre0\x00', &(0x7f0000000ac0)={'tunl0\x00', <r6=>0x0, 0x7, 0x1, 0x2, 0x80, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x68, 0x0, 0x18, 0x29, 0x0, @private=0xa010101, @rand_addr=0x64010101, {[@generic={0x88, 0x6, "eec2a237"}, @rr={0x7, 0x1f, 0x21, [@rand_addr=0x64010100, @private=0xa010100, @broadcast, @multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}, @empty]}, @cipso={0x86, 0x1a, 0x3, [{0x2, 0x6, "71bde27c"}, {0x0, 0x8, "6a22a2e7b4cb"}, {0x7, 0x6, "bedf98c8"}]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000bc0)={'wg2\x00', <r7=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000c00)={'syztnl1\x00', <r8=>0x0, 0x4, 0x3f, 0x9, 0x5, 0x2, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x10, 0x53a5eafe, 0x80000000}})
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000a00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000800)={0x70, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4044}, 0x8041)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000ec0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x18c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20008854}, 0x2000c050)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="4af4d146", @ANYRES16=r3, @ANYBLOB="000227bd7000fcdbdf25440000000c05c70005000000760000000400bf00"], 0x24}, 0x1, 0x0, 0x0, 0x8091}, 0x48080)

03:42:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2371.238906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:42:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:42:35 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:42:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:42:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:42:35 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2371.497709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2371.520348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:42:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r5, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:42:44 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:42:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:42:44 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:42:44 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r3, 0x818, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x7, 0x0, 0x2, 0x2}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008051}, 0x24004001)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:42:44 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:42:44 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:42:44 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x500, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2380.605421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2380.664433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:42:44 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2380.684642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2380.695026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2380.702796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:42:44 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:42:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:42:44 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:42:44 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r5, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:42:44 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2380.893782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:42:44 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:42:44 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2380.983160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2381.023124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2381.057088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2383.480564] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2383.483432] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2383.490137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2383.498174] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2383.503174] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2385.517947] Bluetooth: hci2: command tx timeout
[ 2387.565891] Bluetooth: hci2: command tx timeout
[ 2389.613918] Bluetooth: hci2: command tx timeout
[ 2391.661848] Bluetooth: hci2: command tx timeout
[ 2402.347057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2402.348585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2402.440689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2402.442283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2402.828419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2402.838330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2403.147365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:43:17 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:43:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:17 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x600, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:43:17 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:43:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:17 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x4800)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, <r6=>0x0}, &(0x7f0000000040)=0x5)
setuid(r6)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r7, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000001)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@polexpire={0x1e0, 0x1b, 0x200, 0x70bd2b, 0x25dfdbfe, {{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x9, 0x4e20, 0x7, 0x2, 0x40, 0x0, 0x32, 0x0, r6}, {0x1f, 0x5206, 0x100, 0x4, 0x10000, 0x2, 0x7fffffff, 0x3}, {0x8, 0x2, 0xffffffff, 0x10001}, 0x7, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x3f}, [@policy={0xac, 0x7, {{@in6=@empty, @in6=@private0, 0x4e23, 0x101, 0x4e23, 0x9d3, 0x2, 0x0, 0x0, 0x8}, {0x1, 0x400000000, 0x800, 0x9, 0x1000, 0x0, 0xa8fb}, {0x0, 0x1, 0xdb, 0x7}, 0x5, 0x6e6bc0, 0x2, 0x1, 0x0, 0x2}}, @algo_auth_trunc={0x71, 0x14, {{'blake2s-128-arm\x00'}, 0x128, 0x80, "bb68da69b19e01dd6f4a15dd099659203330f3858881886ba5fb5f6a67e21178844646a7b9"}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x48000)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:43:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:43:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:43:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2413.296526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2413.311528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2413.318505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2413.338101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:43:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:17 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:17 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:43:17 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:17 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:17 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:43:17 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2413.628153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2413.696008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2416.057297] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2416.062307] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2416.065371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2416.070770] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2416.074314] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2418.093862] Bluetooth: hci0: command tx timeout
[ 2420.141882] Bluetooth: hci0: command tx timeout
[ 2422.189981] Bluetooth: hci0: command tx timeout
[ 2424.238814] Bluetooth: hci0: command tx timeout
[ 2435.182806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2435.184121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2435.249226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2435.250693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2435.629208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:43:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:43:52 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:43:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100)={0x0, "e5e6b3459db1b0ad461df7032b16dd86b23942a6d104f75d65120c522c950a4bec2af469b5544fef8d0358fe875a6d9ff557e83394cc6a227eebfb0dfc6014dd"}, 0x48, 0xffffffffffffffff)
keyctl$describe(0x6, r3, &(0x7f0000000080)=""/45, 0x2d)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$link(0x8, r3, r4)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:43:52 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:43:52 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x700, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:43:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2448.108464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.133258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.140582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.144702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.154588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:43:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:43:52 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:52 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:43:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:43:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, 0x0, 0x4000000)

[ 2448.481449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.497494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:43:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2448.524432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:43:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:43:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x530e, &(0x7f0000000100)={@lba, 0x0, 0x3a, &(0x7f0000000000)=""/58})
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:43:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, 0x0, 0x4000000)

03:43:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:43:52 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x900, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:43:52 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2448.744002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.771220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.788251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.794722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2448.801427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:43:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, 0x0, 0x4000000)

03:43:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2449.110360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2449.119684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2449.165086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:44:04 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:04 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:44:04 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:44:04 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:04 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:44:04 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3e99d3144588dbcb82bb89cad9f2768a750f76eb50d5ff6cfe534845af9d9ac37d0d0a7ffa8c6033037e619aea56c5f1a54c36895b54566316c3443188c45f754e2fc6b2f535564dcc34477207d3c9ca9e39f785eedc6fe8595d2834e0cd70f88b1897b30645e9a7ad7fd9e8eaa077e049ca10de00b40eb551", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4)
r3 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x21}, 0x18)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000068cee8f3020b70b900006400010000060202020202020168aa248dcf5594b9343aec40ff0f9ab1b7e1be1004e9e0ca486822ef1135e19f7252d1da722bfd0bae9334a4e6a32124d910f53bff248209db0efa7ba1ca880c2bde1cb1bdd9904836bb28ea9752dfdac722ad0867a6fe1d6dc6e03c39f32d026bd5ee238f85"], 0x36)

03:44:04 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xb00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:44:04 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2460.041668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2460.051285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:44:04 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2460.083290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2460.114327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:44:04 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2460.130307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2460.361495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2460.441329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2460.446476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:44:13 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:13 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:44:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
write$P9_RSETATTR(r3, &(0x7f0000000640)={0x7}, 0x7)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x20, r4, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x66}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4811)
sendmsg$NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:44:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:44:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:44:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:44:13 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2469.333178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.345302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.365166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.383597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.393098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:44:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2469.408648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:44:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, 0x0, 0x4000000)

03:44:13 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:44:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, 0x0, 0x4000000)

03:44:13 executing program 0:
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

03:44:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, 0x0, 0x4000000)

03:44:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2469.656629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.707634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.726634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2469.860283] SELinux: failure in sel_netif_sid_slow(), invalid network interface (5)
[ 2472.124617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2472.130656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2472.133413] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2472.139686] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2472.143662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2474.157842] Bluetooth: hci0: command tx timeout
[ 2476.205924] Bluetooth: hci0: command tx timeout
[ 2478.253848] Bluetooth: hci0: command tx timeout
[ 2480.301894] Bluetooth: hci0: command tx timeout
[ 2491.213721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2491.214884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2491.305573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2491.307084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2491.660214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2491.674635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2491.989228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2491.995412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:44:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:47 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:44:47 executing program 0:
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

03:44:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xf000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:44:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r5, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:44:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:44:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x41000040}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xc34, @media='eth\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x24048080}, 0x40)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2503.482242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2503.495028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:44:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2503.537946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2503.544875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2503.545537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2503.555631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:44:47 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:44:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2503.804097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2503.867103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2503.878257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2506.286157] Bluetooth: hci2: command 0x0406 tx timeout
03:44:57 executing program 0:
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

03:44:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:44:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00{', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="800000000802110000010802110000000800110000000000e100000000000000640001000006020202020202010882848b960c121801010406aa1f1f000900"], 0x41)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@probe_response={@wo_ht={{}, {0x6}, @device_b, @device_a, @from_mac, {0x0, 0x9}}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x0, 0x4, 0x0, {0xff, 0x3f, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2}, 0x6, 0x2, 0x1}}, @void, @void}, 0x52)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r3, 0xa83aba101a888d9a}], 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r4, 0xa83aba101a888d9a}], 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000380)={0x30190345, 0x1f, 0x5, 0x0, 0x0, [{{r3}, 0xb821}, {{r4}, 0x2}, {{}, 0x8}, {{r5}, 0x3}, {{r0}, 0x8}]})

03:44:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:44:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x30000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:44:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r5, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:44:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2513.622340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2513.651836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2513.657406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:44:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:44:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2513.673752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2513.675488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:44:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:44:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:44:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:44:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r5, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2513.967936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2513.983051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2514.006598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2514.012304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:45:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:45:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r5, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:45:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:45:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:45:08 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:45:08 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:45:08 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x80000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:45:08 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000740)={0x0, 0x10001, 0x8, 0x1})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2524.058486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2524.068412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2524.112399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:45:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:45:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2524.141020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2524.158581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:45:08 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:45:08 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:45:08 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:45:08 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:45:08 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2524.377047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2524.477863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2524.484427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2526.909020] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2526.912966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2526.916656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2526.923238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2526.928173] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2529.005872] Bluetooth: hci0: command tx timeout
[ 2531.053808] Bluetooth: hci0: command tx timeout
[ 2533.101826] Bluetooth: hci0: command tx timeout
[ 2535.149832] Bluetooth: hci0: command tx timeout
[ 2545.631955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2545.633107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2545.721463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2545.722840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2546.068597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2546.078486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2546.388144] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2546.395365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:45:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:45:40 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:45:40 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:45:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:45:40 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xf0ffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:45:40 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:45:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:45:40 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x240040c4)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:45:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:45:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2556.713113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2556.714293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2556.717652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2556.729598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:45:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:45:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:45:40 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:45:40 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2556.824453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:45:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:45:40 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:45:41 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2557.043955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2557.188362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2559.418644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2559.424526] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2559.428534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2559.435369] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2559.439551] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2561.453884] Bluetooth: hci2: command tx timeout
[ 2563.503081] Bluetooth: hci2: command tx timeout
[ 2565.549830] Bluetooth: hci2: command tx timeout
[ 2567.597832] Bluetooth: hci2: command tx timeout
[ 2576.648401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2576.649589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2576.736673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2576.737798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2577.024691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2577.033715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2577.341399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:46:12 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x1000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:46:12 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x0, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:46:12 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:46:12 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:46:12 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:46:12 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:46:12 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x140}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x100}, 0x62daf352fab05493)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000002c0)=0x6)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000c40000000000000000640001000006020202020202010882848b960c121824"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r5 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000640)={0x7}, 0x7)
ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000000740)={{0x2, 0x100, 0xff, 0xa71, 0x3, 0xd6}, 0x287, [0x1, 0x1, 0x7, 0x4087, 0x6, 0x5, 0x3, 0x0, 0x1, 0x3f, 0x0, 0x2, 0x6, 0x5f, 0x100, 0x8, 0x3, 0x9, 0x200, 0x2, 0x1ff, 0x3, 0x2, 0xffffff81, 0x101, 0x4, 0xfffffff8, 0x5, 0xffff, 0x800, 0xc0000000, 0x2, 0x0, 0x0, 0x1, 0x7, 0x3, 0x400, 0x3ff, 0x0, 0x5, 0x10001, 0x1, 0x8, 0xfffffff8, 0x7, 0x6, 0x9, 0x200, 0x9044, 0x5, 0x3, 0xe2b, 0xfffffeff, 0x8, 0x8, 0x4, 0x1b, 0x80000000, 0x5, 0xd207, 0x8, 0x861, 0x2, 0xfaa, 0x8, 0x9, 0x7, 0x3, 0xae8, 0x4, 0x0, 0x5, 0x1f, 0x46, 0x7, 0x7, 0x6, 0x5c, 0xffff, 0x9, 0xea, 0x3fc2, 0x3, 0x6f3, 0x5, 0x1f, 0x489, 0x1, 0x6, 0x2, 0x500, 0x8, 0xf18, 0x8, 0xca7, 0x7, 0x8, 0xfffffff9, 0xfffff801, 0x0, 0x3, 0x4, 0x200, 0x4, 0x7ff, 0x8, 0x7, 0x0, 0x3, 0xff, 0x101, 0x2, 0x5, 0x7fffffff, 0x3, 0xc0e, 0x8, 0x6, 0x8, 0x4, 0x1, 0x1000, 0x1, 0x1ff, 0xc1, 0x5, 0x3, 0x1, 0x800, 0x3, 0x20, 0x0, 0x5, 0x101, 0x6, 0x7, 0x4, 0x401, 0x7fffffff, 0xe2, 0xffffffdc, 0x4, 0x7, 0x3, 0x9, 0x1e2c, 0x55, 0x8, 0x8, 0x6, 0x7fff, 0x4, 0x1, 0x8000, 0x28, 0x9, 0x802, 0x1, 0x100, 0xfffffff7, 0x7f, 0x0, 0x5, 0x46bdb267, 0x401, 0x31b2509e, 0x2, 0xffffffff, 0x10001, 0x8000, 0x7, 0x4, 0x7fff, 0x5, 0x4, 0x0, 0x2, 0x7fff, 0x2, 0x9de, 0x5, 0x3, 0x7fffffff, 0x9, 0x81d, 0x2, 0x8, 0x8, 0x100, 0x800, 0xff, 0xb2d, 0x61, 0x5f0, 0x7, 0x4, 0xffffffff, 0x2, 0x7fff, 0x1000, 0xe9, 0x0, 0x31e, 0x4, 0x81, 0x1, 0x4, 0xddc1, 0xfff, 0x6, 0x8001, 0x5, 0x100, 0x5, 0x81, 0x1, 0x7, 0xac12, 0x2, 0x5, 0x292e, 0x40, 0x10001, 0x4, 0x7, 0x0, 0x3ff, 0x9, 0x0, 0x2, 0x5, 0x4, 0x3ff, 0x3, 0x1000, 0x80, 0x7, 0x7, 0x8, 0xf34, 0x3f, 0x2, 0x401, 0x81, 0x6, 0x7, 0xfffffffc, 0x6, 0x0, 0x1, 0x7, 0x10000, 0x2, 0xfffffffc, 0x3, 0x200, 0xfffffffb, 0x0, 0x5c, 0x2, 0x10001, 0x0, 0xfff, 0x8, 0x401, 0x2, 0xabbb, 0x3, 0x4, 0x2, 0x5, 0x6, 0x80000001, 0x3f, 0x9, 0x7fff, 0x0, 0x9, 0xedc, 0x8000, 0x7fff, 0x4, 0x4, 0x7, 0xffff, 0x706, 0x3f, 0x8be, 0x5, 0x2, 0xb2f, 0xf1, 0x2, 0xfffffffd, 0x80000001, 0x1c, 0xf5d, 0x46b, 0x1f, 0x0, 0x5, 0xff, 0x0, 0x1, 0x8, 0x101, 0x8001, 0x7c0, 0x0, 0x1, 0x6, 0x7faa9bc7, 0x972, 0xfc2, 0x4, 0xfffffe01, 0xff, 0x9, 0x20, 0xffffffff, 0x7fff, 0x3, 0x7, 0xe00, 0x1, 0xcaa0, 0x0, 0xfff, 0x40, 0x1f, 0x1, 0x0, 0x300, 0x5, 0x10001, 0x6, 0x3, 0x7fff, 0x6, 0x2, 0x8, 0x8, 0x1d, 0x6763, 0x2, 0x1, 0xffffffc1, 0x3ff, 0x0, 0x7, 0x1d9, 0x2, 0x401, 0x7f, 0x80000001, 0x10001, 0x64bf, 0x10000, 0x2, 0x2, 0x6ef, 0x902, 0x6, 0x5, 0x3f, 0x100, 0xff, 0x6, 0x101, 0x101, 0x8, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1ff, 0xd5, 0x2, 0x2, 0x3ff, 0x8, 0x4, 0x3f, 0x1000, 0x4, 0xfff, 0x1487, 0xfffff000, 0x4, 0x2, 0x6700, 0x1, 0xb52, 0x451601dd, 0x5e3b, 0x9, 0x4, 0x8, 0xe7, 0x0, 0x7, 0x8, 0x800, 0xffffff00, 0x401, 0x20, 0x6, 0x401, 0x6, 0x6, 0x9, 0x600c, 0x40, 0x6, 0xffff, 0x4ca, 0x400, 0x7f, 0x200, 0x3, 0xffffff9e, 0x3, 0x6, 0xa3d6, 0x800, 0x9, 0x6, 0x6d4a, 0x80, 0x3, 0x8, 0x0, 0x1, 0x6, 0x9, 0xfffe, 0x3, 0x80000000, 0xb708, 0x1, 0x2, 0xb58, 0xdd, 0x9, 0x4, 0x2, 0x7ff, 0xffff, 0x7, 0x1, 0x9, 0x8, 0x2, 0x4, 0x30, 0x1, 0xe000, 0xffffffff, 0x5, 0xfff, 0x3, 0x400, 0x8, 0x5, 0x7, 0xfffffffb, 0x4, 0x5, 0x8, 0x812d, 0x6, 0xb9, 0x20400, 0x34, 0x9, 0xfffffff8, 0x5, 0xfffffffa, 0x800000, 0x3f, 0x0, 0x0, 0x45c, 0xe07, 0x4, 0x8e, 0x0, 0x96b2, 0x4, 0x2, 0x10000, 0x800, 0xffff, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x3ff, 0x81, 0x3f, 0x1f0000, 0x800, 0x2, 0x8, 0x2, 0x7, 0x80, 0xe2, 0x80000000, 0x4, 0x200, 0x3, 0x6, 0x0, 0xb99, 0xb44a, 0x5, 0x400, 0x8, 0x6, 0x0, 0x9e5, 0x9, 0x515, 0x4, 0x2, 0xffffffff, 0x0, 0xffffffff, 0x2, 0x80, 0xfffffff8, 0x7ff, 0x5, 0x4, 0x1, 0xffffff80, 0x1, 0x6d05e25b, 0x1ff, 0xe1b9, 0x10000, 0x728, 0x2, 0x80000000, 0x23bb, 0xfffffff8, 0x0, 0xffffffff, 0x6, 0x3ff, 0x535, 0x1, 0xfffffffb, 0x80000000, 0x2b3, 0x5, 0x1ff, 0x7, 0x10000, 0x8, 0x6, 0x7, 0x5, 0x7, 0x583, 0x400, 0x8, 0x0, 0x80000001, 0x80000001, 0x7fffffff, 0xfffffff7, 0x100, 0x0, 0x5, 0x5, 0xe481, 0xfffffffa, 0x8000, 0x80000001, 0xa1f, 0x45f9fd59, 0x8, 0xff, 0x6, 0x6, 0x5, 0x7, 0x4, 0x8001, 0x0, 0x40, 0x2, 0x7f, 0x0, 0xfffffffe, 0x2, 0x2, 0x3, 0x81, 0x9, 0xea, 0x9, 0x7f, 0x1ff, 0x1, 0x7f, 0x4, 0xa398, 0x0, 0x5, 0x800, 0xfff, 0x2, 0x2, 0x7, 0x200, 0x3, 0x4, 0x9, 0x8, 0x0, 0xffff, 0x10000, 0x7fffffff, 0x7ca0c877, 0x4, 0x80000000, 0x2, 0x400, 0x8336, 0x3be, 0x8, 0x80000001, 0x0, 0xfffffffc, 0xe5, 0x2, 0x1, 0x1, 0x9, 0x80000001, 0x9, 0xac5, 0xfffffffb, 0x4f8e, 0x73, 0x5, 0x0, 0x2, 0x0, 0x2, 0x0, 0x7, 0x3, 0x9, 0x3ff, 0x7fffffff, 0x1000, 0x948, 0x1f, 0x3ff, 0x3, 0x10001, 0x0, 0x2, 0x75d, 0x1, 0x6, 0x6, 0xfffffff9, 0x0, 0x1a6fca70, 0x2b, 0x0, 0x2, 0x1ff, 0x0, 0x988d, 0xea, 0x3ff, 0x8, 0x6f4, 0x6, 0x1000, 0x400, 0x7, 0xf3a8, 0x5, 0x1, 0x1, 0xffff, 0x4, 0x8c05, 0x23f3, 0x4, 0x50, 0x8000, 0x7, 0x7b95, 0x7, 0x9, 0x5, 0xfa02, 0x2, 0xffff, 0x0, 0x8, 0x458984ce, 0x1, 0x7fff, 0x4, 0x7, 0x6, 0x2650, 0x33e6553c, 0x543, 0xe18, 0x1, 0x9, 0x947, 0x5, 0x6, 0x1, 0x1d8, 0x1cf, 0x8, 0x5, 0xc9e7, 0x40, 0x5, 0x2, 0x9, 0x2, 0x81, 0x800, 0x4, 0x8, 0x1000, 0x100, 0x0, 0x1a5, 0x6, 0x9, 0xffffffe0, 0x8001, 0x6, 0x7fff, 0x400, 0x5, 0x9, 0x2180, 0x7, 0x80000001, 0x6aa55b55, 0x9, 0x8, 0x7ff, 0x7, 0x6, 0x2, 0x200, 0x9, 0xfff, 0x1, 0x7, 0xecb, 0x7, 0x6, 0xb77f, 0x4, 0xae6a, 0x4, 0xffffff01, 0x60000, 0xfffffffd, 0x99, 0x3f, 0x6, 0x4, 0x3d28, 0x0, 0x3de0a433, 0x7, 0x4, 0x100, 0x7, 0x5, 0x10001, 0x80000001, 0x61, 0x3, 0x1, 0x5, 0x7f, 0x1, 0x10000, 0x100000, 0x400, 0x3, 0x401, 0xdbb5, 0x8, 0x9, 0x8000, 0x5, 0x3, 0x1, 0x7, 0x1ff, 0x5, 0xe35, 0x7, 0x20, 0x6, 0xfffffffa, 0x56, 0x1, 0x0, 0xffff, 0x100, 0x9, 0xbe, 0xff, 0x0, 0x6, 0x7, 0x4, 0x6, 0x16b, 0x7fff, 0x42f, 0x1ff, 0x2, 0xffffffff, 0x1f, 0xfe000000, 0x7, 0x1, 0x6b, 0x80000001, 0xffff3e88, 0x6, 0x7f, 0xffffde29, 0x76bdfbcf, 0x7, 0x8, 0x6248, 0x8000, 0x9, 0xffffffff, 0x1, 0x1, 0x4, 0x2, 0xfff, 0x40, 0x3, 0x800, 0x1ebc, 0x4046ae3, 0x4, 0x0, 0xfffffff9, 0x6, 0x2, 0x1, 0xe0, 0x1, 0x7, 0x200, 0x0, 0x0, 0x140, 0xe400, 0xf987, 0x67e5, 0x800, 0x70b6622a, 0x8, 0x7fff, 0x4, 0x7ff, 0xfff, 0x5, 0x10000, 0x80000001, 0x6, 0x8, 0xe0000000, 0x1, 0xfff, 0x2, 0x6, 0x5, 0xffffffff, 0x9, 0x7fffffff, 0x7, 0x800000, 0x9, 0x3, 0xd679, 0x5, 0x4b, 0xa42, 0x1000, 0xe2c1, 0x7, 0xbc6, 0x5, 0x6, 0x101, 0x5, 0x9, 0x1, 0x1, 0x3, 0x0, 0x6, 0xc5, 0x2, 0x7, 0x29, 0x9, 0x2, 0x2d98, 0x401, 0x7fffffff, 0x0, 0xfff00000, 0x3, 0x10000, 0x2, 0x8, 0xff, 0x7, 0x6, 0x8, 0x0, 0xfff, 0x7, 0xffffffff, 0x0, 0x3, 0x1, 0x800, 0x9, 0x5, 0x0, 0x5, 0x6, 0x9, 0x3, 0x1, 0x7, 0x3, 0x3ff, 0x3b6a, 0x80, 0x2, 0x9, 0xffff, 0x8, 0x5, 0x8, 0x3609, 0x6, 0x9, 0x21, 0x80000000, 0x80, 0x92, 0x7, 0x1f, 0x1, 0x8000, 0x2f096a5f, 0xfff, 0x74e, 0xff, 0x397f, 0x1213, 0x6, 0xfffffffb, 0x718, 0x9, 0x7, 0x0, 0xfffff001, 0x2, 0x800, 0x7, 0x101, 0x9, 0x0, 0x5, 0x7, 0x29fd, 0xd68, 0x3, 0x3, 0xfffffff9, 0x9, 0x2b88, 0x2, 0x8, 0xfff, 0x5, 0x5, 0x5, 0x7, 0x7, 0x80, 0x5, 0x1, 0x100, 0x9, 0x1]})
r6 = signalfd4(r0, &(0x7f0000000000)={[0x80]}, 0x8, 0x1800)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0)
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xb4, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "c7b117bbef2f381683a6e15845079fa1bfdf01571ccf9b9c609f8617"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "8ecca515e4f0c75e56dcc1f4b3a22178432cbe31d454a0d38c6c80"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40008d8}, 0xc000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:46:12 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r3, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2589.006711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2589.018617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2589.025326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2589.026640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2589.100267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:46:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:46:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:46:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:46:13 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(0x0, r0)

03:46:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r3, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:46:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:46:13 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:46:13 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(0x0, r0)

[ 2589.541056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2592.056949] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2592.060262] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2592.062186] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2592.066652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2592.069414] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2594.094046] Bluetooth: hci0: command tx timeout
[ 2596.142458] Bluetooth: hci0: command tx timeout
[ 2598.190014] Bluetooth: hci0: command tx timeout
[ 2600.237863] Bluetooth: hci0: command tx timeout
[ 2611.212334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2611.213704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2611.297362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2611.298995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2611.699830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2611.747281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2612.059141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:46:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:46:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:46:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:46:47 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000000)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x5, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x5, 0x2a, {0x0, 0xe6, 0xdc, "2f55b30aea852c71a0bd0f2760daf679e5c035fcbd71f7210995c8f728e9570482b611f51867db"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0xe1, 0x59, 0x26, 0x401}}}, 0x6d)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:46:47 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r3, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:46:47 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:46:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:46:47 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(0x0, r0)

[ 2623.519038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2623.540113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2623.573487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2623.590086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2623.615358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:46:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:46:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:46:47 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

03:46:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:46:47 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:46:47 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r3, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:46:47 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2623.870447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2623.886310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:46:47 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2623.944084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:46:48 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x3000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:46:48 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

03:46:48 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:46:48 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:46:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2624.150280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:46:48 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2624.250689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2624.272519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:46:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2624.310153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:46:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:46:48 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

[ 2624.637653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2624.649030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2627.067942] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2627.070356] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2627.074219] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2627.081016] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2627.083475] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2629.102295] Bluetooth: hci2: command tx timeout
[ 2631.149846] Bluetooth: hci2: command tx timeout
[ 2633.198852] Bluetooth: hci2: command tx timeout
[ 2635.245838] Bluetooth: hci2: command tx timeout
[ 2646.168351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2646.169464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2646.226885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2646.228031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2646.614700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2646.625418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2646.933309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:47:21 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r3, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:47:21 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x4000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:21 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r3, 0xa83aba101a888d9a}], 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000000)=0x68)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:21 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:47:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:47:21 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000000)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x5, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x5, 0x2a, {0x0, 0xe6, 0xdc, "2f55b30aea852c71a0bd0f2760daf679e5c035fcbd71f7210995c8f728e9570482b611f51867db"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0xe1, 0x59, 0x26, 0x401}}}, 0x6d)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2657.360767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.388290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.392320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.399586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2657.404866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.407131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.415226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x4000000)

03:47:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:47:21 executing program 3:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r3, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:47:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:47:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

[ 2657.555293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:47:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:47:21 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000440), 0x400000, 0x0)
sendmsg$NL80211_CMD_RADAR_DETECT(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x140}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, 0x44}, 0x1, 0x0, 0x0, 0x100}, 0x62daf352fab05493)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f00000002c0)=0x6)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000c40000000000000000640001000006020202020202010882848b960c121824"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r5 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000640)={0x7}, 0x7)
ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000000740)={{0x2, 0x100, 0xff, 0xa71, 0x3, 0xd6}, 0x287, [0x1, 0x1, 0x7, 0x4087, 0x6, 0x5, 0x3, 0x0, 0x1, 0x3f, 0x0, 0x2, 0x6, 0x5f, 0x100, 0x8, 0x3, 0x9, 0x200, 0x2, 0x1ff, 0x3, 0x2, 0xffffff81, 0x101, 0x4, 0xfffffff8, 0x5, 0xffff, 0x800, 0xc0000000, 0x2, 0x0, 0x0, 0x1, 0x7, 0x3, 0x400, 0x3ff, 0x0, 0x5, 0x10001, 0x1, 0x8, 0xfffffff8, 0x7, 0x6, 0x9, 0x200, 0x9044, 0x5, 0x3, 0xe2b, 0xfffffeff, 0x8, 0x8, 0x4, 0x1b, 0x80000000, 0x5, 0xd207, 0x8, 0x861, 0x2, 0xfaa, 0x8, 0x9, 0x7, 0x3, 0xae8, 0x4, 0x0, 0x5, 0x1f, 0x46, 0x7, 0x7, 0x6, 0x5c, 0xffff, 0x9, 0xea, 0x3fc2, 0x3, 0x6f3, 0x5, 0x1f, 0x489, 0x1, 0x6, 0x2, 0x500, 0x8, 0xf18, 0x8, 0xca7, 0x7, 0x8, 0xfffffff9, 0xfffff801, 0x0, 0x3, 0x4, 0x200, 0x4, 0x7ff, 0x8, 0x7, 0x0, 0x3, 0xff, 0x101, 0x2, 0x5, 0x7fffffff, 0x3, 0xc0e, 0x8, 0x6, 0x8, 0x4, 0x1, 0x1000, 0x1, 0x1ff, 0xc1, 0x5, 0x3, 0x1, 0x800, 0x3, 0x20, 0x0, 0x5, 0x101, 0x6, 0x7, 0x4, 0x401, 0x7fffffff, 0xe2, 0xffffffdc, 0x4, 0x7, 0x3, 0x9, 0x1e2c, 0x55, 0x8, 0x8, 0x6, 0x7fff, 0x4, 0x1, 0x8000, 0x28, 0x9, 0x802, 0x1, 0x100, 0xfffffff7, 0x7f, 0x0, 0x5, 0x46bdb267, 0x401, 0x31b2509e, 0x2, 0xffffffff, 0x10001, 0x8000, 0x7, 0x4, 0x7fff, 0x5, 0x4, 0x0, 0x2, 0x7fff, 0x2, 0x9de, 0x5, 0x3, 0x7fffffff, 0x9, 0x81d, 0x2, 0x8, 0x8, 0x100, 0x800, 0xff, 0xb2d, 0x61, 0x5f0, 0x7, 0x4, 0xffffffff, 0x2, 0x7fff, 0x1000, 0xe9, 0x0, 0x31e, 0x4, 0x81, 0x1, 0x4, 0xddc1, 0xfff, 0x6, 0x8001, 0x5, 0x100, 0x5, 0x81, 0x1, 0x7, 0xac12, 0x2, 0x5, 0x292e, 0x40, 0x10001, 0x4, 0x7, 0x0, 0x3ff, 0x9, 0x0, 0x2, 0x5, 0x4, 0x3ff, 0x3, 0x1000, 0x80, 0x7, 0x7, 0x8, 0xf34, 0x3f, 0x2, 0x401, 0x81, 0x6, 0x7, 0xfffffffc, 0x6, 0x0, 0x1, 0x7, 0x10000, 0x2, 0xfffffffc, 0x3, 0x200, 0xfffffffb, 0x0, 0x5c, 0x2, 0x10001, 0x0, 0xfff, 0x8, 0x401, 0x2, 0xabbb, 0x3, 0x4, 0x2, 0x5, 0x6, 0x80000001, 0x3f, 0x9, 0x7fff, 0x0, 0x9, 0xedc, 0x8000, 0x7fff, 0x4, 0x4, 0x7, 0xffff, 0x706, 0x3f, 0x8be, 0x5, 0x2, 0xb2f, 0xf1, 0x2, 0xfffffffd, 0x80000001, 0x1c, 0xf5d, 0x46b, 0x1f, 0x0, 0x5, 0xff, 0x0, 0x1, 0x8, 0x101, 0x8001, 0x7c0, 0x0, 0x1, 0x6, 0x7faa9bc7, 0x972, 0xfc2, 0x4, 0xfffffe01, 0xff, 0x9, 0x20, 0xffffffff, 0x7fff, 0x3, 0x7, 0xe00, 0x1, 0xcaa0, 0x0, 0xfff, 0x40, 0x1f, 0x1, 0x0, 0x300, 0x5, 0x10001, 0x6, 0x3, 0x7fff, 0x6, 0x2, 0x8, 0x8, 0x1d, 0x6763, 0x2, 0x1, 0xffffffc1, 0x3ff, 0x0, 0x7, 0x1d9, 0x2, 0x401, 0x7f, 0x80000001, 0x10001, 0x64bf, 0x10000, 0x2, 0x2, 0x6ef, 0x902, 0x6, 0x5, 0x3f, 0x100, 0xff, 0x6, 0x101, 0x101, 0x8, 0x6, 0x5, 0x1, 0x0, 0x80, 0x1ff, 0xd5, 0x2, 0x2, 0x3ff, 0x8, 0x4, 0x3f, 0x1000, 0x4, 0xfff, 0x1487, 0xfffff000, 0x4, 0x2, 0x6700, 0x1, 0xb52, 0x451601dd, 0x5e3b, 0x9, 0x4, 0x8, 0xe7, 0x0, 0x7, 0x8, 0x800, 0xffffff00, 0x401, 0x20, 0x6, 0x401, 0x6, 0x6, 0x9, 0x600c, 0x40, 0x6, 0xffff, 0x4ca, 0x400, 0x7f, 0x200, 0x3, 0xffffff9e, 0x3, 0x6, 0xa3d6, 0x800, 0x9, 0x6, 0x6d4a, 0x80, 0x3, 0x8, 0x0, 0x1, 0x6, 0x9, 0xfffe, 0x3, 0x80000000, 0xb708, 0x1, 0x2, 0xb58, 0xdd, 0x9, 0x4, 0x2, 0x7ff, 0xffff, 0x7, 0x1, 0x9, 0x8, 0x2, 0x4, 0x30, 0x1, 0xe000, 0xffffffff, 0x5, 0xfff, 0x3, 0x400, 0x8, 0x5, 0x7, 0xfffffffb, 0x4, 0x5, 0x8, 0x812d, 0x6, 0xb9, 0x20400, 0x34, 0x9, 0xfffffff8, 0x5, 0xfffffffa, 0x800000, 0x3f, 0x0, 0x0, 0x45c, 0xe07, 0x4, 0x8e, 0x0, 0x96b2, 0x4, 0x2, 0x10000, 0x800, 0xffff, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x3ff, 0x81, 0x3f, 0x1f0000, 0x800, 0x2, 0x8, 0x2, 0x7, 0x80, 0xe2, 0x80000000, 0x4, 0x200, 0x3, 0x6, 0x0, 0xb99, 0xb44a, 0x5, 0x400, 0x8, 0x6, 0x0, 0x9e5, 0x9, 0x515, 0x4, 0x2, 0xffffffff, 0x0, 0xffffffff, 0x2, 0x80, 0xfffffff8, 0x7ff, 0x5, 0x4, 0x1, 0xffffff80, 0x1, 0x6d05e25b, 0x1ff, 0xe1b9, 0x10000, 0x728, 0x2, 0x80000000, 0x23bb, 0xfffffff8, 0x0, 0xffffffff, 0x6, 0x3ff, 0x535, 0x1, 0xfffffffb, 0x80000000, 0x2b3, 0x5, 0x1ff, 0x7, 0x10000, 0x8, 0x6, 0x7, 0x5, 0x7, 0x583, 0x400, 0x8, 0x0, 0x80000001, 0x80000001, 0x7fffffff, 0xfffffff7, 0x100, 0x0, 0x5, 0x5, 0xe481, 0xfffffffa, 0x8000, 0x80000001, 0xa1f, 0x45f9fd59, 0x8, 0xff, 0x6, 0x6, 0x5, 0x7, 0x4, 0x8001, 0x0, 0x40, 0x2, 0x7f, 0x0, 0xfffffffe, 0x2, 0x2, 0x3, 0x81, 0x9, 0xea, 0x9, 0x7f, 0x1ff, 0x1, 0x7f, 0x4, 0xa398, 0x0, 0x5, 0x800, 0xfff, 0x2, 0x2, 0x7, 0x200, 0x3, 0x4, 0x9, 0x8, 0x0, 0xffff, 0x10000, 0x7fffffff, 0x7ca0c877, 0x4, 0x80000000, 0x2, 0x400, 0x8336, 0x3be, 0x8, 0x80000001, 0x0, 0xfffffffc, 0xe5, 0x2, 0x1, 0x1, 0x9, 0x80000001, 0x9, 0xac5, 0xfffffffb, 0x4f8e, 0x73, 0x5, 0x0, 0x2, 0x0, 0x2, 0x0, 0x7, 0x3, 0x9, 0x3ff, 0x7fffffff, 0x1000, 0x948, 0x1f, 0x3ff, 0x3, 0x10001, 0x0, 0x2, 0x75d, 0x1, 0x6, 0x6, 0xfffffff9, 0x0, 0x1a6fca70, 0x2b, 0x0, 0x2, 0x1ff, 0x0, 0x988d, 0xea, 0x3ff, 0x8, 0x6f4, 0x6, 0x1000, 0x400, 0x7, 0xf3a8, 0x5, 0x1, 0x1, 0xffff, 0x4, 0x8c05, 0x23f3, 0x4, 0x50, 0x8000, 0x7, 0x7b95, 0x7, 0x9, 0x5, 0xfa02, 0x2, 0xffff, 0x0, 0x8, 0x458984ce, 0x1, 0x7fff, 0x4, 0x7, 0x6, 0x2650, 0x33e6553c, 0x543, 0xe18, 0x1, 0x9, 0x947, 0x5, 0x6, 0x1, 0x1d8, 0x1cf, 0x8, 0x5, 0xc9e7, 0x40, 0x5, 0x2, 0x9, 0x2, 0x81, 0x800, 0x4, 0x8, 0x1000, 0x100, 0x0, 0x1a5, 0x6, 0x9, 0xffffffe0, 0x8001, 0x6, 0x7fff, 0x400, 0x5, 0x9, 0x2180, 0x7, 0x80000001, 0x6aa55b55, 0x9, 0x8, 0x7ff, 0x7, 0x6, 0x2, 0x200, 0x9, 0xfff, 0x1, 0x7, 0xecb, 0x7, 0x6, 0xb77f, 0x4, 0xae6a, 0x4, 0xffffff01, 0x60000, 0xfffffffd, 0x99, 0x3f, 0x6, 0x4, 0x3d28, 0x0, 0x3de0a433, 0x7, 0x4, 0x100, 0x7, 0x5, 0x10001, 0x80000001, 0x61, 0x3, 0x1, 0x5, 0x7f, 0x1, 0x10000, 0x100000, 0x400, 0x3, 0x401, 0xdbb5, 0x8, 0x9, 0x8000, 0x5, 0x3, 0x1, 0x7, 0x1ff, 0x5, 0xe35, 0x7, 0x20, 0x6, 0xfffffffa, 0x56, 0x1, 0x0, 0xffff, 0x100, 0x9, 0xbe, 0xff, 0x0, 0x6, 0x7, 0x4, 0x6, 0x16b, 0x7fff, 0x42f, 0x1ff, 0x2, 0xffffffff, 0x1f, 0xfe000000, 0x7, 0x1, 0x6b, 0x80000001, 0xffff3e88, 0x6, 0x7f, 0xffffde29, 0x76bdfbcf, 0x7, 0x8, 0x6248, 0x8000, 0x9, 0xffffffff, 0x1, 0x1, 0x4, 0x2, 0xfff, 0x40, 0x3, 0x800, 0x1ebc, 0x4046ae3, 0x4, 0x0, 0xfffffff9, 0x6, 0x2, 0x1, 0xe0, 0x1, 0x7, 0x200, 0x0, 0x0, 0x140, 0xe400, 0xf987, 0x67e5, 0x800, 0x70b6622a, 0x8, 0x7fff, 0x4, 0x7ff, 0xfff, 0x5, 0x10000, 0x80000001, 0x6, 0x8, 0xe0000000, 0x1, 0xfff, 0x2, 0x6, 0x5, 0xffffffff, 0x9, 0x7fffffff, 0x7, 0x800000, 0x9, 0x3, 0xd679, 0x5, 0x4b, 0xa42, 0x1000, 0xe2c1, 0x7, 0xbc6, 0x5, 0x6, 0x101, 0x5, 0x9, 0x1, 0x1, 0x3, 0x0, 0x6, 0xc5, 0x2, 0x7, 0x29, 0x9, 0x2, 0x2d98, 0x401, 0x7fffffff, 0x0, 0xfff00000, 0x3, 0x10000, 0x2, 0x8, 0xff, 0x7, 0x6, 0x8, 0x0, 0xfff, 0x7, 0xffffffff, 0x0, 0x3, 0x1, 0x800, 0x9, 0x5, 0x0, 0x5, 0x6, 0x9, 0x3, 0x1, 0x7, 0x3, 0x3ff, 0x3b6a, 0x80, 0x2, 0x9, 0xffff, 0x8, 0x5, 0x8, 0x3609, 0x6, 0x9, 0x21, 0x80000000, 0x80, 0x92, 0x7, 0x1f, 0x1, 0x8000, 0x2f096a5f, 0xfff, 0x74e, 0xff, 0x397f, 0x1213, 0x6, 0xfffffffb, 0x718, 0x9, 0x7, 0x0, 0xfffff001, 0x2, 0x800, 0x7, 0x101, 0x9, 0x0, 0x5, 0x7, 0x29fd, 0xd68, 0x3, 0x3, 0xfffffff9, 0x9, 0x2b88, 0x2, 0x8, 0xfff, 0x5, 0x5, 0x5, 0x7, 0x7, 0x80, 0x5, 0x1, 0x100, 0x9, 0x1]})
r6 = signalfd4(r0, &(0x7f0000000000)={[0x80]}, 0x8, 0x1800)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0)
sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xb4, r7, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "c7b117bbef2f381683a6e15845079fa1bfdf01571ccf9b9c609f8617"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "8ecca515e4f0c75e56dcc1f4b3a22178432cbe31d454a0d38c6c80"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40008d8}, 0xc000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2657.649971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.686069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.715628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2657.728369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:32 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:47:32 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:47:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:47:32 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:47:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:47:32 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="4093129525812871b114bc02c4bbe8bc06000000893a838a1a64178c937cee36e32febd18979d83bd5f2f3c40ba49bc7ef96d01edb81a1ea75ec09986c07600a36a623bbb21a0a0038d451307f8b936317c17732b4d043618ab322525edb0296776d94219d0fea762ec6272270860a27f48befd2c1e960b614fdf0f58f95ca72259126c81c64992cc63762cea00f161fa5cdd755575a7651071d1a0e9e6809693c5aca541e8e98e9e8f4cf30139bd309d0885053d88f7a217698d939feb759815508570e52607c7fc83c048fde05dcfe802f4dab", @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000080211000001080211000000080200100000000000e5f81215000000000006020202020202010882848b960c121824"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:32 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000000)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x5, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x5, 0x2a, {0x0, 0xe6, 0xdc, "2f55b30aea852c71a0bd0f2760daf679e5c035fcbd71f7210995c8f728e9570482b611f51867db"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0xe1, 0x59, 0x26, 0x401}}}, 0x6d)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:32 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x5000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2668.028693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2668.033209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2668.037643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2668.046388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2668.071112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2668.080695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2668.085551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2668.097489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2668.342792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2668.409628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:43 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

[ 2678.998242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 2679.001114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:47:43 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x6000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:47:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000000)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @broadcast, @device_a, @from_mac}, 0x5, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x5, 0x2a, {0x0, 0xe6, 0xdc, "2f55b30aea852c71a0bd0f2760daf679e5c035fcbd71f7210995c8f728e9570482b611f51867db"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0xe1, 0x59, 0x26, 0x401}}}, 0x6d)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0d00020000000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000740)=@mgmt_frame=@reassoc_resp={@wo_ht={{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @device_a, @random="1ef6143d1e2e", {0x9, 0x6}}, 0xc800, 0x31, @default, @void, @void, [{0xdd, 0xa2, "7bffd018b52204be25627efdcf92ad5a446cc08233843c74e8bd6e937bdeb8d48e9288979cc832408b3d67e33a5d2b8d94ed3b121d77518a40e5a01d475ab2f36e1930a03d36527a1ad1ed50304f7860bacc091adf06dc4134a21abc910328ca94d73c071de736ab2ee666c2f39a578e9d06373ba35cb3dd4b249a89d8a5a55b1ab6a6f2a6475ada08f932b34d76a5a0f7bdd096e5b28bbff8dc6380b26c904f227c"}, {0xdd, 0xaf, "7e4b29147d4380d12bc73a151e6db3efdae8a2bd6c6a5be0022982453d14d9c862302db1cd76a2cd6791d6d489c0e27c61c7979d4b14137c0d70d5d13fb5837ae1f4f8d939041ca34212e0f7754b95caf39cc7d42e6b622365e30777dd74a28085fc29c829d119309bf99f575c915f00a8b2bc06170a57292dfe9789cea6430c4ee954017b3a5dc95f0da4a6180c60d271ba250496e103aa2af3fbac6f6eddfd92645b22acec01287d00d6ae21343a"}, {0xdd, 0x6b, "a3aa9a5d80b44811ef936e9d4c7c6abafe94927d1d530870bcec32e6267d4bae5ecd9f6d70eae82546605eef98f2b859a3d2dab965fcfe36cc23371a401f6d7fbca9a80849d2f3437df54e1847e8eccfa5cd96446deaeec65ba4400af4b8fd721a5a27181789a1b3178eed"}, {0xdd, 0xfa, "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"}, {0xdd, 0x3b, "4728dbefa9a101c0ea0cb1e030511dc62951438743bde67644fb6882912537378a44d8b36ba72eef4220c947ee8e9c5272ebddc8d11f90987790c3"}, {0xdd, 0x3c, "29bbbe6d2f2b448719b189765b030fb1a6eaffbf26dad61db215d0bbd0ca53ea753a2fbbd06dc921c01f8638f7f919d2e3ddf5a74bbc5579ef87f1d7"}, {0xdd, 0xaf, "8a0b6c035ec556337dd51e8cbe65a12ec180b9bf9f1d3c5c0558e362502d23daff0ad15c4af7aede73a342533e680ca925d866df39910f623b481180c05911fa2c250297fd1eba0ddf1ef760ef590ab084175bd49bf5a9d590cf7c392dd2c2102229a27a6f9f749f64467475207ec084a0c5198e79cf81159234ec18ae82aa3be76ce64ae56108c3c297c505a5dfe1d0a58d1807c4748a4d77406e31d4f4d72791b00d5e1b099d2b1597a0dc41f99e"}, {0xdd, 0xd6, "5278a9b15870154f373915130dc5e3ddb49a5bd8ad6e9fb6d505627f8ad6b42d34b0766ba2459eaf31c912180f1b9e9f54d1d425989db2d9d5d8aef2db4be48213cb884b6fa286b0937228878ed89aaeea0732ba72708b70cddedb9790b91378641de37839f2a1857a4dc8930129ab0e5006b1d37d83077a33b00421d25a0055fe3f9ae667a187560ed2bc816666c6380351d5f86cb3d419a3ca1b9e12ddb0ac08e6f938c257264f391aef3c23151eaeed86743026d34d91fc4478005aef6eddf4142c244aee109e5441882a4c3c5920fe03ea1e05b2"}, {0xdd, 0x35, "192b112401973b5db71b9e40ab7fc5bcbf01b1bde11f19569cf67400c3e9adc316ffea6b925b2e221b6e5f4b36b3898fa19befea43"}, {0xdd, 0x32, "abee1b99f2ffac4970d260670b0ee247abe81f06b1b68709ac767538e50895745d8c661544465f993e7af349603964c8a515"}]}, 0x54b)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:47:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xf00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2679.012640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.042004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.045991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.056628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.097462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.102367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.107170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.111346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.117598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x4000000)

03:47:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:47:43 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:47:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:47:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3e99d3144588dbcb82bb89cad9f2768a750f76eb50d5ff6cfe534845af9d9ac37d0d0a7ffa8c6033037e619aea56c5f1a54c36895b54566316c3443188c45f754e2fc6b2f535564dcc34477207d3c9ca9e39f785eedc6fe8595d2834e0cd70f88b1897b30645e9a7ad7fd9e8eaa077e049ca10de00b40eb551", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4)
r3 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x21}, 0x18)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000068cee8f3020b70b900006400010000060202020202020168aa248dcf5594b9343aec40ff0f9ab1b7e1be1004e9e0ca486822ef1135e19f7252d1da722bfd0bae9334a4e6a32124d910f53bff248209db0efa7ba1ca880c2bde1cb1bdd9904836bb28ea9752dfdac722ad0867a6fe1d6dc6e03c39f32d026bd5ee238f85"], 0x36)

[ 2679.274123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.282366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.324167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2679.365499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:47:52 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:47:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4080)
setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000280)={0xe2, 0xa6}, 0x2)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:52 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:47:52 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x7000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:47:52 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3e99d3144588dbcb82bb89cad9f2768a750f76eb50d5ff6cfe534845af9d9ac37d0d0a7ffa8c6033037e619aea56c5f1a54c36895b54566316c3443188c45f754e2fc6b2f535564dcc34477207d3c9ca9e39f785eedc6fe8595d2834e0cd70f88b1897b30645e9a7ad7fd9e8eaa077e049ca10de00b40eb551", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4)
r3 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x21}, 0x18)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000068cee8f3020b70b900006400010000060202020202020168aa248dcf5594b9343aec40ff0f9ab1b7e1be1004e9e0ca486822ef1135e19f7252d1da722bfd0bae9334a4e6a32124d910f53bff248209db0efa7ba1ca880c2bde1cb1bdd9904836bb28ea9752dfdac722ad0867a6fe1d6dc6e03c39f32d026bd5ee238f85"], 0x36)

03:47:52 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xb00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2688.573430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2688.580121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2688.583806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2688.584386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2688.599377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2688.606237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2688.612009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2688.638054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2688.642359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2688.717571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(0x0, r0)

03:47:52 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:47:52 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(0x0, r0)

03:47:53 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

[ 2688.973106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:53 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r4, 0x1}, 0x14}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r4, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x100}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x4800)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, <r6=>0x0}, &(0x7f0000000040)=0x5)
setuid(r6)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r7, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000001)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=@polexpire={0x1e0, 0x1b, 0x200, 0x70bd2b, 0x25dfdbfe, {{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x9, 0x4e20, 0x7, 0x2, 0x40, 0x0, 0x32, 0x0, r6}, {0x1f, 0x5206, 0x100, 0x4, 0x10000, 0x2, 0x7fffffff, 0x3}, {0x8, 0x2, 0xffffffff, 0x10001}, 0x7, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x3f}, [@policy={0xac, 0x7, {{@in6=@empty, @in6=@private0, 0x4e23, 0x101, 0x4e23, 0x9d3, 0x2, 0x0, 0x0, 0x8}, {0x1, 0x400000000, 0x800, 0x9, 0x1000, 0x0, 0xa8fb}, {0x0, 0x1, 0xdb, 0x7}, 0x5, 0x6e6bc0, 0x2, 0x1, 0x0, 0x2}}, @algo_auth_trunc={0x71, 0x14, {{'blake2s-128-arm\x00'}, 0x128, 0x80, "bb68da69b19e01dd6f4a15dd099659203330f3858881886ba5fb5f6a67e21178844646a7b9"}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x800}, 0x48000)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:53 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3e99d3144588dbcb82bb89cad9f2768a750f76eb50d5ff6cfe534845af9d9ac37d0d0a7ffa8c6033037e619aea56c5f1a54c36895b54566316c3443188c45f754e2fc6b2f535564dcc34477207d3c9ca9e39f785eedc6fe8595d2834e0cd70f88b1897b30645e9a7ad7fd9e8eaa077e049ca10de00b40eb551", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4)
r3 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x21}, 0x18)
sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="50000000080211000001080211000000080211000000000000000068cee8f3020b70b900006400010000060202020202020168aa248dcf5594b9343aec40ff0f9ab1b7e1be1004e9e0ca486822ef1135e19f7252d1da722bfd0bae9334a4e6a32124d910f53bff248209db0efa7ba1ca880c2bde1cb1bdd9904836bb28ea9752dfdac722ad0867a6fe1d6dc6e03c39f32d026bd5ee238f85"], 0x36)

03:47:53 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r9=>0x0})
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x24004804)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:47:53 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x9000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2689.229927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2689.231306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2689.238975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2689.262230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2689.276586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2689.283231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(0x0, r0)

03:47:53 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2689.350477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2689.377642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:47:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

[ 2692.216442] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 2692.219140] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 2692.224221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 2692.228375] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2692.235186] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 2692.237547] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2692.239394] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 2692.244924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2692.260488] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2692.265201] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2692.308490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2692.310465] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2692.315486] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2692.324065] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2692.327330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2694.253980] Bluetooth: hci0: command tx timeout
[ 2694.317824] Bluetooth: hci2: command tx timeout
[ 2694.381824] Bluetooth: hci3: command tx timeout
[ 2696.301869] Bluetooth: hci0: command tx timeout
[ 2696.366871] Bluetooth: hci2: command tx timeout
[ 2696.429824] Bluetooth: hci3: command tx timeout
[ 2698.349819] Bluetooth: hci0: command tx timeout
[ 2698.415772] Bluetooth: hci2: command tx timeout
[ 2698.477898] Bluetooth: hci3: command tx timeout
[ 2700.397798] Bluetooth: hci0: command tx timeout
[ 2700.462619] Bluetooth: hci2: command tx timeout
[ 2700.525895] Bluetooth: hci3: command tx timeout
[ 2708.731578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2708.732309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2708.850332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2708.851016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2709.208119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2709.245984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2709.552550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2709.562492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2709.707034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2709.707654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2709.751306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2709.752216] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2709.923943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2709.925371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2709.993984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2709.994952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2709.995957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2710.002031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2710.244015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2710.307189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:48:23 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:48:23 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xb000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:48:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x94, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4011}, 0x8000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

03:48:23 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r9=>0x0})
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x24004804)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:48:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:48:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

03:48:23 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x2, 0x80, 0x2}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x40, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x6c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc1}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x165}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20004800)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000003c0)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_a, @random="2a1ca5a5bfbc", {0x6, 0x1}}, @ver_80211n={0x0, 0x2, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x0, @default, 0x8401, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0xb4, "e46206a0a9230fc84f341e4d56b5453a83a34fadfe0587e37c8206f55c8964f8ca18b8be08d9e0efe69c4602abac7c7f41f657d593d1b9bbaa644c0bd08275b30e5d221e4361ab49af9d27dea4af8fba1ccda747049e1f2f6d29a8a344c4be4224eebf87d73861c45e6d74fc7ea3d8c3a68c04d860066693a9354970c10bd8c25db25bbf2296f3d34fba3094a8bc31736f62d4d62fa0a7176aed01e93d60d9da5dd97bad0afbc35a6adfad7fa6133e1b7243f440"}, {0xdd, 0xeb, "f4fbbcbd6c8210b8fd2609070ae6ea45d37cc52a91c22fc220d7c63b70a39c578b70e4bd8388b299ff1c02811151dab6035fa70ce3e1495be376cea8e157d01e2e882daa25fa3f18d98c053a1eadb4007d5be10112dec41bac7c2522fc7832140242c7606d0e122e232cfda0af030eda92e2e42a18547c7486edbe982cec195197d674cb9d8ec756071571eb688f072455b264896c4bde118664f3885114f94e57e1c7e2a1f64ed05d854b8c6b5d9fde54e713c5e14c04e1333f64860b294ab72908573ed78c7db6d03157e1c6f4cfbc710a7184f9d92c722524170169538120afacc17daca5cb8dc2607f"}]}, 0x1d8)

[ 2719.340394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.353095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="401a000053674534", @ANYRES16=r1, @ANYBLOB="0500000d00000000000a2100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b616263e465666768696a6b00000010002d800a0000000202020202020000"], 0x40}}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32=r2, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7595491c, 0x7}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040083}, 0x4000000)

[ 2719.392382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.394270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:23 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2719.481922] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.490189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.502333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.518577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:23 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xf0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:48:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)

[ 2719.571600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.572656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.582705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2719.685325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000380)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_b, @from_mac, {0x0, 0x20}}, 0x0, @random=0xfff, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x8, 0x0, 0x3, 0x6851}}, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x8, 0x0, 0x5, 0x0, {0xffff, 0x3f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x8000, 0x8}}, @void, @void, @void}, 0x64)
r3 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
write$P9_RSETATTR(r3, &(0x7f0000000640)={0x7}, 0x7)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff78}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:48:23 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xf000000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:48:23 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

[ 2719.880282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:23 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r9=>0x0})
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x24004804)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:48:23 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2719.898691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.933783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.937476] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:23 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2719.943614] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.951573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.955746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.970167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2719.989128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2720.015942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2720.262034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2722.175984] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2722.182133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2722.184112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2722.189385] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2722.194181] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2724.269887] Bluetooth: hci2: command tx timeout
[ 2726.317945] Bluetooth: hci2: command tx timeout
[ 2728.365844] Bluetooth: hci2: command tx timeout
[ 2730.414814] Bluetooth: hci2: command tx timeout
[ 2741.569283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2741.570425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2741.628597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2741.629868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2742.051267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2742.060357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2742.432085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2742.446183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:48:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = openat2(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x2, 0x80, 0x2}, 0x18)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x40, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x6c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc1}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x165}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20004800)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000003c0)=@mgmt_frame=@probe_response={@with_ht={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_a, @random="2a1ca5a5bfbc", {0x6, 0x1}}, @ver_80211n={0x0, 0x2, 0x3, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x0, @default, 0x8401, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1}, @void, @void, @void, @void, @void, [{0xdd, 0xb4, "e46206a0a9230fc84f341e4d56b5453a83a34fadfe0587e37c8206f55c8964f8ca18b8be08d9e0efe69c4602abac7c7f41f657d593d1b9bbaa644c0bd08275b30e5d221e4361ab49af9d27dea4af8fba1ccda747049e1f2f6d29a8a344c4be4224eebf87d73861c45e6d74fc7ea3d8c3a68c04d860066693a9354970c10bd8c25db25bbf2296f3d34fba3094a8bc31736f62d4d62fa0a7176aed01e93d60d9da5dd97bad0afbc35a6adfad7fa6133e1b7243f440"}, {0xdd, 0xeb, "f4fbbcbd6c8210b8fd2609070ae6ea45d37cc52a91c22fc220d7c63b70a39c578b70e4bd8388b299ff1c02811151dab6035fa70ce3e1495be376cea8e157d01e2e882daa25fa3f18d98c053a1eadb4007d5be10112dec41bac7c2522fc7832140242c7606d0e122e232cfda0af030eda92e2e42a18547c7486edbe982cec195197d674cb9d8ec756071571eb688f072455b264896c4bde118664f3885114f94e57e1c7e2a1f64ed05d854b8c6b5d9fde54e713c5e14c04e1333f64860b294ab72908573ed78c7db6d03157e1c6f4cfbc710a7184f9d92c722524170169538120afacc17daca5cb8dc2607f"}]}, 0x1d8)

03:48:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000380)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_b, @from_mac, {0x0, 0x20}}, 0x0, @random=0xfff, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x8, 0x0, 0x3, 0x6851}}, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x8, 0x0, 0x5, 0x0, {0xffff, 0x3f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x8000, 0x8}}, @void, @void, @void}, 0x64)
r3 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
write$P9_RSETATTR(r3, &(0x7f0000000640)={0x7}, 0x7)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff78}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:48:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x9effffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:48:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:48:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:48:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r9=>0x0})
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x24004804)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))

03:48:57 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465666768696a6b00000010002d800a0000800202020202020000"], 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2753.211355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.246587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.247119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.254503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.256673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.269226] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.270422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.293421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.297106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.314294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.385405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.397654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:57 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2753.492150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000280)=@device_b, &(0x7f0000000380)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_b, @from_mac, {0x0, 0x20}}, 0x0, @random=0xfff, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x8, 0x0, 0x3, 0x6851}}, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x8, 0x0, 0x5, 0x0, {0xffff, 0x3f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x800, 0x8000, 0x8}}, @void, @void, @void}, 0x64)
r3 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
write$P9_RSETATTR(r3, &(0x7f0000000640)={0x7}, 0x7)
sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffff78}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2753.596092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:48:57 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r9=>0x0})
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x24004804)

03:48:57 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xf0ffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:48:57 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0xf8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffe01}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x24}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x80001}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x9}, {0x5}, {0x6}, {0x8, 0xb, 0x10001}}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc5}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r4, 0xa83aba101a888d9a}], 0x1, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffea0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000f9ffffff4008d019a6ae980d40d07af9f689272c485d93934067d2a92fdd6930c762fea1ad", @ANYRESHEX, @ANYBLOB="05000000af00000000000006000000080003", @ANYRESHEX, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r5, 0xa83aba101a888d9a}], 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r6, 0xa83aba101a888d9a}], 0x1, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYRESHEX=r6], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x8a, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2753.686785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.714382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.735046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.757844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.772223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:48:57 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
write$P9_RSETATTR(r3, &(0x7f0000000640)={0x7}, 0x7)
sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4044000}, 0x4004000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000380)=ANY=[@ANYBLOB="80000000080211000001080211000000080211000000e1ffffff000000000000640001000006020202020202010882848b960c1218240301a52a0101f30cb9f95274476441299d97a0e16ed9139cd3b09326f2219f50dd65d3db8487f7e20b4ffda1a9812251b3a57d37a0e3697e39c35cd6a01e037e863fadcc7b4aa34398670ec04163a3eb96701fc24dd857e0c811b5d730c9c0e4bd5f2d2e0b6a1b2f53c45e08f6aa94f9e029b0000000004a41381a9ce9ee1c54830e4365"], 0x3c)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2753.777386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.784939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.798799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.844481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.867622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.923184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2753.935503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2754.114252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:49:09 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r9=>0x0})
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044000}, 0x24004804)

03:49:09 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0, {0x1}}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {<r4=>0x0}}, './file0\x00'})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8)
getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=<r6=>0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=@delpolicy={0x3cc, 0x14, 0x200, 0x70bd27, 0x25dfdbfb, {{@in=@local, @in6=@loopback, 0x4e22, 0x0, 0x4e22, 0x401, 0xa, 0x0, 0x80, 0x62, 0x0, r4}, 0x6e6bb8}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x2}, @algo_aead={0x100, 0x12, {{'rfc4543(morus1280-sse2)\x00'}, 0x5a0, 0x0, "cd16a2e59d9ff62f21330d0df3b9f6e86b94327423c19e8c001539573b895401d4f98b70e4825ad7ed09226bb1fcab4bf7228fe5093a9dc64f5aea8409fdf7c7882d7597ae8a67d6567c557c4edf8183473644cbfecacf4dd3a0215c3585aa8f08c6b3be1fa9cfe0bfe21f6a55a17b8a913c8a7289f877403472a2cdc59508afc6fa712b143b33efe9a5ed92ce861ce36510c33714b7298daf6203e25a3d30c57d66d8c4caa84c616d23f21f65ca1adaef2f40ee"}}, @policy={0xac, 0x7, {{@in=@local, @in6=@local, 0x4e24, 0xffff, 0x4e21, 0x5, 0x2, 0x20, 0x20, 0x3b, r5, r6}, {0x8001, 0x3, 0x7, 0x6, 0x0, 0xffc0000000000000, 0x6, 0x7ff}, {0x3f, 0x1f, 0x3f, 0x40}, 0x5, 0x6e6bb4, 0x2, 0x1, 0x2, 0x3}}, @policy_type={0xa, 0x10, {0x1}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @algo_auth_trunc={0xcb, 0x14, {{'blake2s-224-generic\x00'}, 0x3f8, 0x200, "39c40594f06f7c7cdee3ac01fb37ef923a9d91f6fe74cf7e3cf897340dea195d1d306cb7d164cf573c22136bea83ab8281f8a700760b86c7d3eeac0a591128d5bfc4e08a42a924f742097f584c7c4078839b88896de7ed85b2e09bc7aa087f0e3d279cd421e419c484b33f619759c133620aba6e83d96308a35990b470c4e0"}}, @sa={0xe4, 0x6, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21, 0x4, 0x4e24, 0xfa, 0x2, 0x20, 0x0, 0x2b, 0x0, 0xee01}, {@in6=@empty, 0x4d6, 0x3c}, @in6=@private0, {0x3, 0x8, 0x5, 0x80000000, 0x0, 0xfff, 0xb5d, 0x100}, {0xd48, 0xfc0000000, 0x1ff, 0x4}, {0x2, 0x2a8, 0x4}, 0x70bd29, 0x0, 0xa, 0x2, 0x5}}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x4040080}, 0x10)

03:49:09 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:49:09 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x3ed, 0x200, 0x70bd27, 0x25dfdbff, "9c193019819211e89a18e3c251749ec86ff502d9ea9a94e9c0684008988beeb5fe006e12", ["", "", "", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x48010)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:49:09 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:49:09 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xfcffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:49:09 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r9=>0x0})
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0)

03:49:09 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0xf8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffe01}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x24}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x80001}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x9}, {0x5}, {0x6}, {0x8, 0xb, 0x10001}}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc5}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r4, 0xa83aba101a888d9a}], 0x1, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffea0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000f9ffffff4008d019a6ae980d40d07af9f689272c485d93934067d2a92fdd6930c762fea1ad", @ANYRESHEX, @ANYBLOB="05000000af00000000000006000000080003", @ANYRESHEX, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r5, 0xa83aba101a888d9a}], 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r6, 0xa83aba101a888d9a}], 0x1, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYRESHEX=r6], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x8a, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2765.865428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2765.873098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2765.894852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2765.896674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2765.918475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2765.922576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2765.938485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2765.944682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2765.956502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2765.973374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2765.988628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:49:10 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:49:10 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:49:10 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:49:10 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x100, 0x4)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0xf8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfffffe01}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x24}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x80001}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x8000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x9}, {0x5}, {0x6}, {0x8, 0xb, 0x10001}}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc5}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r4, 0xa83aba101a888d9a}], 0x1, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffea0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000f9ffffff4008d019a6ae980d40d07af9f689272c485d93934067d2a92fdd6930c762fea1ad", @ANYRESHEX, @ANYBLOB="05000000af00000000000006000000080003", @ANYRESHEX, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r5, 0xa83aba101a888d9a}], 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff})
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r6, 0xa83aba101a888d9a}], 0x1, 0x0)
r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYRESHEX=r6], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x8a, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:49:10 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00'})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00')

[ 2766.447006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2766.488351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2766.502584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2766.505262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2766.514268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2766.541574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2766.580238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2766.612004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2768.893610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2768.900425] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2768.903323] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2768.908970] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2768.912940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2770.926902] Bluetooth: hci3: command tx timeout
[ 2772.974611] Bluetooth: hci3: command tx timeout
[ 2775.022001] Bluetooth: hci3: command tx timeout
[ 2777.069814] Bluetooth: hci3: command tx timeout
[ 2788.335901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2788.337012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2788.427289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2788.428578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2788.778771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2788.788256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2789.096195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:49:42 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="24b72000", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @val={0x6, 0x2, 0x1}, @void, @void, @void}, 0x32)

03:49:42 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xfffff000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:49:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x5, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:49:42 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:49:42 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:49:42 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:49:42 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00'})

03:49:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0, {<r4=>r0}}, './file0\x00'})
setsockopt$inet_buf(r3, 0x0, 0x23, &(0x7f0000000100)="a06c5e1184d67c3a2cf18e6f9161ed3f2d415f398a71dd8c5945366badc0bc1221b7b8c735aff8149c89ab8cfde8cc866827bd131967a40af60265a3f19514dcb2a8c2a7b8baf0178879d62fce64c3d0b39e2ba59fb64d6aadc2898b932b611c", 0x60)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r5 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
write$P9_RSETATTR(r5, &(0x7f0000000640)={0x7}, 0x7)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', <r6=>0x0, 0x29, 0x5, 0x3f, 0x8001, 0xa, @mcast2, @mcast2, 0xfbcf, 0x7, 0xa046, 0x3}})
ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6_vti0\x00', <r7=>0x0, 0x4, 0x3, 0x2, 0x3, 0x13, @mcast2, @loopback, 0x7800, 0x80, 0x0, 0x400}})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6tnl0\x00', <r8=>0x0, 0x6, 0x2, 0x59, 0x3, 0x3, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x8000, 0x100, 0x8001}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002a80)={'macvlan0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002ac0)={'batadv_slave_0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000002e40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000002e00)={&(0x7f0000002b00)={0x2cc, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x63}}}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40010}, 0x90)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2798.906916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2798.945361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2798.952352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2798.959118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2798.961520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2798.970635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2798.976907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2798.979984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2798.992077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2798.999043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2799.022568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2799.034358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:49:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2799.132088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:49:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

[ 2799.272461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2799.297023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:49:43 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xffffff7f, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:49:43 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:49:43 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:49:43 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x5, 0xb7, {0x40, 0x8e, 0x6, "3400134ba2fdd8f4683afaf7cbba5609068c6d3f841bc0fe6f39c9fbd31fd7178a8c5f9974e93f13a4d1de0e1f3a550bc5ab41d016c84ccb3608185a69c3d9ca4a8cf9102e77bf185088336b55aa6afa47ae79b3adb8a2ffc6fdf500f02ffe3cf8a65d5d6e9b36096931d29d0180204383f4d1d878cf1c617e3bbb1e6e3cacde9f3a43b4059b788f011d3cfa4aba00fb7ce54b0edfa1d657309742a74d31468e9a7ae260c39ef14753f1885bf0e7d4903e35a432"}}, @void, @void, @void, @void, @void, @void, @void}, 0xef)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)={0x388, r4, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x308, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb3, 0x3, "bb891c70243425de367f007cea666fe98d4226be33684171b456dfad2d78e6089a89071d7bf5d289ec85db52737504ee931db75d08251d362eb6f7cfc8a3ea90c0d89e8fd2683bf726de106f54511a43b79c59e17693eb001c58e6d367edb93861eb68aea671810b29fc590f02b2164bff989b2fa9e2c479477dcbf6349690e09cdf3a46269c5efeb21138fe7e322081e2e8e410de9499cbe60d7bea875e1efbd896565d89b260fb7eb62a3c8a19de"}, @NL80211_BAND_5GHZ={0xcd, 0x1, "24fda423a27535178ac3399be3f01939b938e032a14ba137c300de31df15660321fc3a4aa171c172f5cc7ec0a9d6d1d193eaca838fd0bd4e684e67c780696e734a1856aecbd4627d967d82c2874994939d3840c8e5acfad473eafac50e4461a6a4273014836ad2266f9c3530f9d8e555c6393eb09deaa594ce6dca8db27610dd603fe7146f9495dee30b3cb975aa20c661e561e3f6923566bb797cc14e84b6a8d5ae6b0dcd78c49b127a03b77bcef050f2cdf3b470555278a08c8257e5e5a0c018dbaa5d19ec41afc6"}, @NL80211_BAND_6GHZ={0xc8, 0x3, "ae5bfc8844ecfa3e7e555ba827462bf01f17b204c35a4f771ced980cfe8e1d3d252787112ad24c3ea0f452237fa9ef91855a749640619550e6b3093533f71f17f0d1024e396380e1aa46ffbf3fc91aac1f5461c504b4ea869fe5d17ef7297ba83dd8d9685da7619389b5fba5a138fcba4e6518a1a5196caac72eed8421fbb135b1f6156f961cd49e0b0ab73337cdb54c68035d8a9cadd9c33eb980703d49eecada27a7c83b2455e14d76f64a30efadf50e1db1cddca02a77ac73d9b2d3d5a04b751d76f7"}, @NL80211_BAND_5GHZ={0x56, 0x1, "b984540a12090e20bf008261f9f0c11c6b3505debea8ebceb3e5eb0e4a622b0bfc0845dd3a015992638149931e83ca5fa8270b5f02609693a1c82f396c5fb6b3b476bcec041deacb912a3e3cbcc3e269e61c"}, @NL80211_BAND_60GHZ={0x5e, 0x2, "0fd8e2d4caa4c837314fa9587093d01027a36910a5b42b592db30fe858950207669e9399709703fcfe08cece27c8fab54a4acb0559b5783b269c9e7a1041497e5214d63cb368b8c067b466db3a593dd6a3c076d892e8f1a7b1d3"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xd287}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7ff}, @NL80211_ATTR_SCAN_FREQUENCIES={0x54, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x7b38}, {0x8, 0x0, 0x200}, {0x8, 0x0, 0x4c}, {0x8, 0x0, 0x4586}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x9}, {0x8}, {0x8, 0x0, 0x610}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x350}]}, 0x388}, 0x1, 0x0, 0x0, 0x840}, 0x4000000)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan3\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r8=>0x0})
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='clear_refs\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x24}}, 0x0)
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x4004800)

03:49:43 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2799.393051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2799.406225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2799.412318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2799.433094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:49:43 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2799.474260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2799.485150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2799.493726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:49:43 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2799.524880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2799.538247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2799.652119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2799.669392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:49:43 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)

[ 2799.794387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2800.084457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2802.109385] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2802.115537] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2802.117453] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2802.124984] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2802.127933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2804.141808] Bluetooth: hci3: command tx timeout
[ 2806.189839] Bluetooth: hci3: command tx timeout
[ 2808.237836] Bluetooth: hci3: command tx timeout
[ 2810.285879] Bluetooth: hci3: command tx timeout
[ 2817.582798] Bluetooth: hci0: command 0x0406 tx timeout
[ 2820.287586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2820.288804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2820.369462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2820.370451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2820.667412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2820.677310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2820.984694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:14 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xffffff9e, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:14 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

03:50:14 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:50:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:14 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:50:14 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:14 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x40, r5, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x12c4, r1, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x5}}}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "790322e6b95fe004cbc8c3b621d0079c8323806ea87b34f67bfc379711eca9ac340891426bf2ab2877f80ef1836798b93a33771735fd23911275d9b20cc02f1472ba3c0f784109c42982ea20402d8391bf9d4e561aeb8da388b690ff6a19c220a5aa0c9b3adb4f8065d7aebca6728129a558ddee67e69b49336854e66d1dcd6dca521af95ff38d142796be71f19fa70c5e3538ef320d833e3434a9544bdfcb4ee32df6586286d1164aa364c9dca5e0d7e193e51bdd548809224087bdd98a2c15e8465c2262aa376613a44a391296fbc3749789a79c0c3533664a84be1b4584c40ce95cf93d79894da48cc459a368eed0e2f9211e2fbcb3bedf6f2a0aaf2ced15e7f90ce5d2966944ccc8feca4ee1e278ccaa46a3d6e66ffc255a800d635977dc75484297e875ca2e56b50922d3154c68a6454480861cad0fb4eeaa4c206b1e642daf38904dcf5c006134725e1e9375b11414c04f5ac6fbc1d53f51fde66fb299ed5e3b55eed306ddb927d7ed3d5ff62ffad6b1706a5f3abc0b17a4b76c18c201266871e03984142b93f67f921c938da4a5fb4853211a691a1e761667d29b9f5ec02a217357deebce307b418002feab8e97f10520259ec7a1cd8fc8f38fec9fd53dd2a9ff6d22d7c78feebca866ea3c0029d55653246c08da3ccafc75e5344863c9867d82c7257a74766b611fd75d1f4002dcbd3de73be6bd5c617648819ce8990b5abf002a4b1aead17ee1fc3a21701300bc761e012f12f43e28b0f269ee43217a624dfc101cff077d53aaf4e775333bd0091a2d99df201207f5d5317f21e653e88dbe842cda28f4bab4878dc199de9b542755e7b763ffb98138e5331c0471efb536fb7aaf3acac68999f572ceee0b36bd6ecde3d123ca81daf0bfe8dae70b2b378c191c621687b2b51a09281e04d1fd349d7fa6de5c1526a16da88b534ba8ff5fe10ac1952ade939c09975694562c5efb0e813b5ee4817484c17bac99c41f5139a38d40fb751f2c797b4c6f651116452d1ac011e6086b0b2fe4d529c63357065344ceb546b1812f70fb3bee158d40a7980275b0904a64afa820c0adfea3ac026df9341fc3b8513061c12b52ee6174ca2df0769d55b2543c2a583cba866737595a5cdfd8c8389625998961c38965b1b8b9040aea08464f65510211c63a6b3a40252c0257a6222dc49fcb4e799a6df1c84d09acee41df990863e5bf37baafaec594600d277e21a8cc8280023314ff7c3d99fbdad1601e36f02109a759cc45ca817e0005b5589b512137e31392fe2650b2707c0ca03810253ca15f6629933d69ffac6d2ecc753a5c775b13cbc71fc8fdbd142031648790ebb4d2ed077dc647f01abd36646f0f64c23b9b5bafb80b90f41927ea14f79f36322a441d33b98728133cae9ffbfa96fb34fe01af77f1bd53d8fc019b97efcfb0cca0a586620e89b5eb00d2ba75cc8e7c19952aeaa0c3abaa3144f473195abd8b5a1fc02ab4bb3f8e37b19dd7f0e3bf2d79e42ae601a2a4c368612eb0af0345d013d3ef95ff47f7d2c97b3e3786d10f83bac6d1b321e92459ab3c1ce26aea928de08a261513cf158307fd230c0ad7395bc96a8745e1f9592ac3ae820b7e0e579015e6f432736c215821f7a0e7f7ebee6025b443cbfe8ece00809b8a982d9f9579ae59160c1592b3e47a383f2e01387b6105e0f129ed28c271d8bd260255e63075f3deaf4047e8cb90b7b2f40f9ae09e5257754dc760d56bd27dad888b1a3692dae69c2c5a4489a017bb2ca54106760d27e8e7454d4651be582548da2d46da57ab22d56caa3aca3c665337de0c5c2d19ae4369a93cddf764b514e60f53f6d4b110f09e56a5973a88cafc6be881b415d0dcb7d39a0c991acc55d464cc5de8d7ec2a38a9c8ff10c7d6fcc9bba5fd66f6b5c70084ce2a8415d43879627eb4e7171c743363e79160208cd05b183651012ea2e3bd424b526801318a4e34ed99a960898e97f3c2c300686190841d0a61e44747edb6ae6f56f5fcd1d310dafbaad100313ec577b6559138f90840a5c78df0d4c2c23e4d246586b000a5adc842ec1c4218146969c6b060a8d871376d1e3329d307d941755fb2735be748ce50adcee1fbffd542787ef4202d1a3653fcad8d4073d1e4fb1d7f3fed42b0f0c92ca8b2e13f8733648a47ac77d98f2757d2b509fabb14b4237de937725a933a2368570f71e4bd05621557b0baa43f54cfd21d73c30539734b8cf9055ea2ca7ce42455fc79534b0207fbf1cec52042e0918204c8587ed220293a5840f1cd1baef9cb563dec36a68267a50b31390dcabf394c1cf381769335095d4e87540ccbbe14508c50acbfb9fc027d6c000da790683beb0cde7c698d0372c2dac366a42bc9f1b3ceba652a185ac0a5446f9dedcf9b4f4f12827be083ec05962bd83eb592a4455d8831778261a34d646337359c3307a3d0d54cc3569ee27ef1afa7aabad39b1fb9799d4281641dbf36a8d21e95b4093f6e38a5b9d05b258986437d82ee2d9bd1de94db2dd6ec803d122a95d2a1262a29095baaea5ca18d1456b335d43a4b68e57ed40bef2b310893d3bd301f3eea4aec1778f2f01036147ab0ddb8852676bc02585d38a955e01f0f78e73e8fffba86a88a655c73877b34e94d49371f837968286caf4aa2af2af5f595e5930a2e346fe5d7d8b36a06e4e9eb11e2e8299ec3dfa6489f12c8328683d36003e5c2ddd7c729fcd140657c9c70d09d8a051adafc64cd0849f4b66893c6ad3bc2ea8b3ca1f58596b034b01bf218de8fd0c884712549fdcd03fa999755b64fec288cf9ca86eebd7baf8a5f1a651fe599b6cb396626823c916a7eac4de435d641b4af100c4a57b92a1b5ee4896e1acb2f8c9ecff069c5e33b1909a5ea0e219c40dcd5b67cf76e41996c84afef992ace6277b045d347d4f26bf678ec03700af6da0613ddacab83d504b2fedff604737ef286318c0786b99b99e65aedefe5798cf9a4fde5a05ccab8afe69eab7b3adc3d8fb8d4813fef84b3513c479cfabbdfbe30f9c011afabd03add75aa06b6634e72dfcd58ee9d6858d83de74a97270c46ff42c19d8c68f392b2c4bc621801a5d20fcd6562888d59bceb7ff94b94b17ea36cc26b50265dba8ee6d1d0a1738889bd01067bb3b8a6ea9ac1dcd39d6a579d59bee9c00ad64f315f9519c184702ccd5e149e747d98c5899b3e4acb5b491817689d5299c472cacf626d486fe6e83a5056f8b0041a533cd63c0a87e48188fce32fc0109e298b9f8bb814f6bd94ea29d614b7c7191a8b48203cccc9cbe3071192e68f319aad4d79dbeaa5c7b8b9ce8ae5effca582b1ceb148cb3d4fa1f47f4313c3a926c5a4c74010c627d33f9f2a48146f00d07727ec133b2ea84d8a137498fb78ee67248a76a86a198d0efb27a33d88cf367165cefa5c17914f0fe964d537bff621300fec96d8e8546f512fd75ace3b87f7dcfa47c30324f5eb0ffc66b8f921b54af70cf4614214014650db6cd30fe567f1b6f98bd49fc5e2fa951b73519e7e7f53e69a86e1ed16d0729a8f3da44e41886aa0d2e9a8992ed8a7352c89b6f7b0a1be1883375a708cb298108a31d7e589e7062857b39e6f2e9c6bb73d254f7b00fe92ba9b9056f5315bd3bbbb959c7a15c2be91d9229bb1e8888517f0572c3fe02600e05412e51136deb77b532afd6d31787f46fcd41474fb177b0f466506b2c0bc30b05492be190801f658ad867ded5edff335c595953005f40140dce48a3969b1afdca52da3e3827cc715d23a030dc3cadb66186a5dbd7c5d848486e72a14487fa93c85437ba6dfec95010dc85bd9aa3de9a7629bf31c9183ee56ab1cc74047c8819bdae0e720cddca4d1aea8e1f3d55e4402cc8d3451c7c753829877678eefa498ea760b3a7f6f00c06f3f212ab4ecf05e203e88234945ee0d59e42765b09540cb2c3d5f519b2ce19c6498458b5ccac06f247b0bc4b32c7831915c1ee25589f6aa72787d1158fd146e3c58b1aed93901040e6e5436418ff337a75826ec3ad4d3ab7e9baf71cc107ea2469b6084fa9ef5c4755decd76ead752883d69d4315d5cfca180a6f9ee3d66960ebf62e9f5709b86d35cba8ce94551389dbda3682611d1ef0915f513420e81aeabfd5c70e614d2179c8f73175c41f4e4593f8d94b96f452fb751365e338a821253d3d5572100444242cee53f4c3711c3c37f68c0c6f9d5464ae4c29dc04e2b9572df5d665dcb04798f8c3c6f3224f762a2fe42241dd6cc3c5698d42359e6b54d64ea93bb4ef5e2516feb971675211bf0fa9d41559e9ab0e216d0dd5600c9eb43f3c313ff6a1388c1cc6730162769017f099ca513eac1114b77b19dc4ed9b572c90dfd2f2ec8bd7aaca3fd4c1cd63af7aa89afa94f2c588ce89e9450414d11028dc7e5fc742dc23f737e684348a0a5b8b3cfd05258349b5d0d48adb75d64214585b2b4ae83cdfcdcf722cca8decc8041209e1045aaa0559b7308c5229e00f029ce447077b19823dbafc9b4fa021ca96e31da160106ee884e01cddbdc42aca2d7ca99bdf6467d0e7398f84928d9df5023306ca2440733cc35f579beac6cfdc56875e9bd74796a4e91892943e15ae2f8e4fa3411800fcf8e5f243e2566aa759f178bfc69e73004a8472aded3eb00b2fcefd85c36d450fd6e08629b423417473fa7c11c712fef032794b6840900f2f2908c0beb59f9803d69b928f7a65b22305335e89e42ac44130b561783094e2e15a008f5618465be1e6c556523af38cc8cd6fb67eaabd95e3b1db6ad2726b899863b1f5b71ef4aad0a6e8e6bb1ddb9de7582411d4b145bae22f40b818854716b89dc52d7e2d197030cc4a74e70a0dd01dbe0ee7d784fbf1ee4a25aa9e25dfc632df327d0266b5db1856bcf5a4a7826c7139a4cb4cd3b9afca4e34cc35fbab24bf021cb5ba136010c1c4cd98ca367e70bb048b10e269b429c10ec396ac0228d41c2114e43501f40d597883e22e97b770242fce2a3cffb20e15cf107281b6f9a2acac4e5aa84d6b57e2456a3bc3e43b724a8d3212c16b1a8e55441933451ef36f889647bdeb7a87d9e8c578b4302ade605d5abe7b900c1bfd5308502b1ebbe997d71a67d64cdc1838ab0d7d0bfa5c63fec996a76569f9c39541d4482531e94168ade4ce5a43bff04c30a493f24bafc87c4373b7b5b8db1e5ebe5978b54dfb33f306f8c73dbe79c5307c037ac879b65a34b21fca55fd411005fc087714a4cbcbdb43cd38b772d229eec76718bf83d329e4a752f80efb523df8a74c5df4dc38dc1c76ccc4e1b851f93ce9701f195711717176c35a77e0f4fb9cf09f944fc584c45b38bf2684f1f6c46e2f2ac5f4230e3c08e31ebdf93b3c7d0d8f9723808d7e37d94acb02ebdb9d1010e69aaf3d503f7b247cda28e7e687b1c338d97ef9b05661d9675cb048dcf5bb9dbb289360df3fe5c34bef1da649b2b22e8ed1de1b587e408c9fdb9a51ccb81d08e6390a941d652680f1d88327aceb5f18732f702af9390c7f1e88943d38c74ed36c225a71e9553ab5ec9850d01166aee07ea9fffc32ebbee7954c34666b5863123559ebf82fa3ad57083a475121d94e16713164f3090e993b9eb29f106e43ad01ecb16ec94f98489498a373b75220681d90a2d1eb21ef6cc2486948bf2dfffd0eaf90230912a7d6c3649aee99a30e0ceb6c3a38379e9e282a1f3bf0c894fa653c693b047b49c364d21947970e19fde8b2a854c56429f2d46ee8159bb06fe11785643c8cd8280feaa912ef865fbf854cda6f2b66e5290b643a36999fd2fb56a87397f66249302ed72cdde26da2a28"}, @NL80211_ATTR_TESTDATA={0xf8, 0x45, "f730813f1e450d342a84db01b9702c40ca30ffe74ac6e05c7517eb622d7f6bb8c5b1717d33d40233b650843316ded6b440f24ab56fc40ab65a8535594278565af80ecc4c34c34563c4aa93097b5f75e2027114c0c3253c7d4728745b61a95750ab4094b84716000942d3a01f923ee4d6f4f7cfd62d24628090a31e8eed634e6a0b28100f679670db767427c98b234951d8afa6ba036001f019a3c5ebb681845610446aaddbc3bc89d13783e88fed702a1ede8c2ea49d991fe19b5005144e05fb937159ea8af51ff19d043dca029b114594743e77bc1e0248712ade9bec1b2215901041c5175e7c13ea1b8c2365a8e34bdf69a7cd"}, @NL80211_ATTR_TESTDATA={0x83, 0x45, "6f399032c3627ddf48a1fdbf4676f9976ef4ea76282e25daf00f700a25a0e8f254b3fa2ca83418aeae9393fbf49e164619faccd77241bbbd64b84bd562809b316db7c0aece71baa710e12a3bc89785b53e110bcbae634df66a010b259da9fff0cc7cf699412b69e679debd7dcb5948c8f802bff1539926fda9a4d5d0487ad8"}, @NL80211_ATTR_TESTDATA={0x45, 0x45, "936985bec1beb767350d04915451130a6c005fd46fd9eda372f2e1632fb32a220d7f939e1f0fc7a668a59fd5e941554106504b1ada307f38cea76618eafba63ca0"}, @NL80211_ATTR_TESTDATA={0xd1, 0x45, "8f9f041b6b6fd12a3a99f418faa375c1309514a38517d52fb9c4648a4062fd51aaf52871fbc995ee4cb3400e7c770fc5481743cbea42e6082b5c35c2ec49c16fe59a67b3d335cd407a77ffb32c6a3577302815d822997a37cc6ace5221df91c9c62c9ff96aabf6c2fa2bb4165940c28b61f0966a14bfec8346c5d172000721e4d3923505b9a63727d26174a719debf5116f3c096ad08d9f7c0a593cf3589461859c82ddaf185ec23da0c5b69cec4a49ed94070332b25822baa184a977adc78d703ffca5d2bdb05283e8286b43a"}]}, 0x12c4}, 0x1, 0x0, 0x0, 0x4c001}, 0x810)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2830.835047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2830.844572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2830.854107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2830.860279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2830.869170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2830.869205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2830.886628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2830.890671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2830.904875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2830.911840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2830.949085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2830.960447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2831.102819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:15 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

[ 2831.169086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2831.180641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:15 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:15 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xfffffff0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2831.215038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2831.222540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2831.235954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2831.243863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:15 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="500000080211000000000000000000000000006400010000060202020276b3010882848b960c121824d737356460309d5fc590d17dc29d69feff33ce1cf4bb99f1452428939a75c77525695d29096e55513b856638f9af1cf56376bc4d5efa50d99fd8d3e79c8ac71c7b20e9dfa41c502dd87c28a4194a58919cc7c886ccdd5d96f45db909b5d013b95526c6b623b6e1cbc6b3cbfdd7d0d31cba08d488b3264b1da6ea5a7b658435315be612ee57c5"], 0x36)

[ 2831.269265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:15 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

[ 2831.277579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:15 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000100)=@ctrl_frame=@bar={{}, {0x4}, @device_b, @broadcast, @basic={{0x1}, {0xd, 0x3}}}, 0x14)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2831.307521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2831.366511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2831.374029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2831.375000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2831.386918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:15 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
write$P9_RSETATTR(r3, &(0x7f0000000640)={0x7}, 0x7)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt(r7, 0x2e70fc91, 0x2d22, &(0x7f00000001c0)="4d037593fdf30712a553f7bad08cc12bc7db7d1d448031", 0x17)
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x40, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={0x6fc, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xda38, 0xc}}}}, [@NL80211_ATTR_TX_RATES={0x348, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x7, 0xb6db, 0x80, 0x3, 0x3, 0x16]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x3}, {0x2}, {0x2, 0x3}, {0x4, 0x8}, {0x2, 0x2}, {0x0, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x4, 0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x7}, {0x6, 0x4}, {0x3, 0x7}, {0x4, 0x7}, {0x6, 0x6}, {0x0, 0x3}, {0x7, 0x7}, {0x6, 0x8}, {0x3, 0x8}, {0x6}, {0x5, 0x3}, {0x7, 0x8}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0xa}, {0x0, 0x7}, {0x6, 0x5}, {0x6, 0x6}, {0x4, 0x5}, {0x6, 0x9}, {0x7, 0x3}, {0x6, 0x6}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x1, 0x8}, {0x6, 0x6}, {}, {0x4, 0x4}, {0x4}, {0x3, 0x2}, {0x2, 0x2}, {0x2, 0x7}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x9}, {0x7, 0x2}, {0x0, 0xa}, {0x5}, {0x0, 0x5}, {0x3, 0x9}, {0x3, 0x6}, {0x2, 0x6}, {0x3, 0x7}, {0x1, 0x8}, {0x3, 0x3}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0x2}, {0x7, 0x5}, {0x6, 0x6}, {0x2, 0x5}, {0x7, 0x7}, {0x0, 0x6}, {0x0, 0xa}, {0x7, 0x9}, {0x1, 0x9}, {0x4, 0x4}, {0x0, 0xa}, {0x0, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x40, 0xfffb, 0x6, 0x1, 0xff09, 0x40, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x36, 0x6c, 0x12, 0x24, 0x60, 0x60, 0x24, 0x12, 0x9, 0x12, 0x3, 0xb, 0x3, 0x3c, 0x60, 0x9, 0x30, 0x12, 0x2, 0x18, 0x3, 0x3, 0x24, 0x6c, 0x60, 0x18, 0x4, 0x60, 0x6, 0xc, 0x9, 0x1]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x5, 0x319, 0x401, 0x218, 0x3, 0x5]}}]}, @NL80211_BAND_6GHZ={0x9c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0xa3, 0xee, 0xbd6, 0x1, 0x6, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x0, 0x2}, {0x5, 0xa}, {0x0, 0x4}, {0x4, 0x3}, {0x6, 0x4}, {0x3, 0x9}, {0x2, 0x4}, {0x5, 0x2}, {0x7, 0x1}, {0x7, 0x9}, {0x6, 0x2}, {0x4, 0x1}, {0x1, 0x5}, {0x1, 0x3}, {0x3, 0x4}, {0x6, 0x4}, {0x5, 0x5}, {0x2}, {0x7}, {0x2, 0x6}, {0x1, 0x5}, {0x4, 0x7}, {0x5}, {0x3, 0x2}, {0x5, 0x9}, {0x4, 0x3}, {0x5, 0x7}, {0x1, 0x6}, {0x3}, {0x5}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x1, 0x8}, {0x6}, {0x6, 0x2}, {0x5, 0x4}, {0x1, 0x7}, {0x6, 0x1}, {0x5, 0x7}, {0x2, 0x9}, {0x4, 0x5}, {0x5}, {0x3, 0x7}, {0x3, 0x7}, {0x2, 0xa}, {0x1, 0x5}, {0x5, 0x1}, {0x3, 0x9}, {0x2, 0x9}, {0x5}, {0x6, 0xa}, {0x0, 0x3}, {0x7, 0xa}, {0x1, 0x9}, {}, {0x6, 0x9}, {0x7, 0x3}, {0x7, 0x8}, {0x1, 0x1}, {0x0, 0x3}, {0x7}, {0x3, 0x7}, {0x7, 0x4}, {0x1}, {0x5, 0x7}, {0x3, 0x7}, {0x2, 0x4}, {0x3, 0x2}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0x6}, {0x0, 0x4}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x6}, {0x7}, {0x4, 0x6}, {0x0, 0x2}, {0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x5}, {0x3, 0x7}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x4, 0x9}, {0x2, 0xa}, {0x5, 0x5}, {0x1, 0xa}, {0x7, 0x6}, {0x0, 0x8}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xb9, 0x800, 0x5, 0x6, 0xaec, 0x0, 0x8]}}]}, @NL80211_BAND_6GHZ={0x4c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9a, 0x0, 0x4842, 0x2, 0x9, 0x3ff, 0xf001]}}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x0, 0x9}, {0x1, 0xa}, {0x7, 0x4}, {0x6}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x6}, {0x1, 0x3}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x6, 0x12, 0x6, 0x16, 0x9, 0x16, 0x24, 0x48, 0x0, 0x16, 0x36, 0x16, 0x18, 0x16, 0x9, 0x48, 0x1b, 0xc, 0x36, 0x16, 0x12, 0x36, 0x30, 0xc, 0x9]}]}, @NL80211_BAND_5GHZ={0xcc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x2, 0x6}, {0x7, 0xa}, {0x7, 0x8}, {0x2, 0x6}, {0x7, 0x1}, {0x2}, {0x5}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x8}, {0x2}, {0x0, 0x4}, {0x2, 0x3}, {0x6, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {0x6}, {0x4, 0x2}, {0x4, 0x2}, {0x5, 0x5}, {0x5, 0x1}, {0x5, 0x2}, {0x2, 0x7}, {0x1, 0x3}, {}, {0x0, 0x6}, {0x5, 0x8}, {0x3, 0x5}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0x4}, {0x6, 0x8}, {0x3, 0xa}, {0x3, 0x5}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0x1}, {0x7, 0x9}, {0x3, 0x9}, {0x7, 0x4}, {0x0, 0x8}, {0x6, 0x6}, {0x4, 0x4}, {0x1, 0x6}, {0x4, 0x8}, {0x3, 0x6}, {0x5, 0x2}, {0x3, 0x4}, {0x3, 0x6}, {0x0, 0x5}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x9}, {0x1, 0x6}, {0x3, 0x2}, {0x6, 0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x8}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8000, 0x0, 0x7, 0x4e, 0x7, 0x1, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xffff, 0xffff, 0x1f, 0x7ff, 0x331, 0xffff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x7, 0x7, 0x4db, 0x3, 0x0, 0x6, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x0, 0x7b76, 0x4, 0x7fff, 0x7f, 0x5896, 0xff79]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x5, 0xa}, {0x7, 0x4}, {0x3, 0x2}, {0x1, 0x1}, {0x3, 0x6}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0x9}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x5}, {0x1, 0xa}, {0x2, 0x9}, {0x5, 0x8}, {0x2, 0x3}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x1}, {0x1, 0x4}, {0x5, 0x3}, {0x2, 0x3}, {0x1, 0x4}, {0x4}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x16, 0x1, 0x24, 0x60, 0x1b, 0x4, 0x18, 0x1, 0x5, 0x0, 0xc, 0x4, 0x6, 0x24, 0xb, 0xc, 0x5, 0x3, 0x48, 0x9, 0x60, 0x6c, 0x36, 0x2, 0x16, 0x9, 0x48, 0x1, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x60, 0x60, 0x6c, 0x0, 0x4]}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0xc, 0x24, 0x3]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0x18, 0x12, 0x6, 0xc, 0x5, 0x3, 0x9, 0x1, 0x16, 0x6, 0x30, 0x18, 0x16, 0x3, 0x36, 0x3a, 0x1b, 0x18, 0x0, 0x2, 0xb, 0xc, 0x6, 0x24, 0x0, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x42, 0x2, [{}, {0x2, 0x4}, {0x2, 0x9}, {0x1, 0xa}, {0x2, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x4}, {0x0, 0x7}, {0x5, 0x7}, {0x6, 0xa}, {0x4, 0x1}, {0x1, 0x5}, {0x4, 0xa}, {0x2, 0x1}, {0x1}, {0x6, 0x7}, {0x7, 0x7}, {0x2, 0x5}, {0x0, 0x4}, {0x5, 0x3}, {0x2, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x1, 0x5}, {0x5, 0x4}, {0x7, 0x3}, {0x2, 0x7}, {0x2, 0x1}, {0x1, 0x4}, {0x5, 0x1}, {0x3, 0x7}, {0x5, 0x9}, {0x7}, {0x2, 0x7}, {0x0, 0x5}, {0x2, 0x3}, {0x6, 0x7}, {0x3, 0x1}, {0x3, 0x5}, {0x4, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x5}, {0x0, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x9}, {0x3, 0x2}, {0x6, 0x1}, {0x1, 0x3}, {0x6, 0x3}, {0x1}, {0x7, 0x7}, {0x6, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0x3}]}]}]}, @NL80211_ATTR_TX_RATES={0x38c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0xffff, 0x8001, 0x4, 0x9, 0x4, 0x398c, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3f, 0x3, 0x4, 0xfff, 0x400, 0x9]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x6c, 0x1b, 0x4, 0x9, 0x0, 0x30, 0x12, 0x36, 0xc, 0x30, 0x3, 0x24, 0xb, 0x73, 0x5, 0x30, 0x30, 0x18, 0x24, 0xb, 0x60, 0x4, 0x48, 0x1, 0x2, 0x6c, 0x12, 0xb, 0x4, 0x36, 0x5, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x23f2, 0x7f, 0x0, 0x3, 0x0, 0xd05, 0x3]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x36, 0x6, 0xb, 0x30, 0x30, 0xc, 0x60, 0x24, 0x5, 0x36, 0x48, 0x6c, 0xc, 0x6, 0x1, 0x51]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0x5, 0x81, 0x7, 0x8, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x350, 0xfff, 0xda36, 0x200, 0x0, 0xfffa, 0x38]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x9, 0x9, 0xc, 0x18, 0x5, 0x3b, 0x6, 0x9, 0x3, 0x6, 0x5, 0x60, 0x24, 0x1b, 0x5, 0x9, 0x4, 0xb, 0x1b, 0x24, 0x1b, 0x6c, 0x60]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xea7f, 0xd452, 0x1f4d, 0x3, 0x7fff, 0x5, 0x9, 0x8]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5c8, 0x2, 0x75, 0x6, 0x0, 0x0, 0x5da]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x3}, {0x3, 0x2}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0x5}, {0x6, 0x7}, {0x7, 0xa}, {0x6, 0xa}, {0x6, 0x2}, {0x7, 0xa}, {0x1, 0x5}, {0x3, 0x8}, {}, {0x1, 0x7}, {0x2, 0x5}, {0x5, 0x1}, {0x2, 0x9}, {0x1, 0x2}, {0x6, 0x4}, {0x0, 0x2}, {0x5, 0x9}, {0x4, 0x4}, {0x3, 0x1}, {0x1, 0x2}, {0x5, 0x7}, {0x5, 0x8}, {0x4, 0xa}, {0x2, 0x3}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0xa}, {0x0, 0x4}, {0x4, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x7}, {0x6, 0x2}, {0x6}, {0x0, 0x2}, {}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x1}, {0x6, 0xa}, {0x3, 0x1}, {0x7, 0x8}, {0x4, 0x6}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0xa}, {0x4, 0x4}, {0x5, 0x4}, {0x0, 0x3}, {0x4, 0x9}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x5, 0x3}, {0x6, 0x1}, {0x2, 0x1}, {0x6, 0x5}, {0x1, 0x2}, {0x1, 0x5}, {0x7}, {0x7, 0x7}, {0x6, 0x1}, {0x1}, {0x6, 0x1}, {0x1, 0x2}, {0x5, 0x9}, {0x3}, {0x7, 0x4}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x6, 0xa}, {0x1, 0x3}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x2}, {0x4}, {0x7, 0x7}, {0x1, 0x1}, {0x3, 0x9}, {0x2, 0xa}, {0x7, 0x5}, {0x5, 0x9}, {0x6, 0x7}, {0x2, 0x9}, {0x6, 0xa}, {0x0, 0x1}, {0x2}, {0x2, 0x7}, {0x0, 0x2}, {0x3, 0x9}, {0x1, 0x1}, {0x3, 0x6}, {0x4, 0x5}, {0x7, 0x8}, {0x7, 0x8}, {0x3, 0x2}, {0x5, 0x2}, {0x1, 0x7}, {0x4, 0x8}, {0x2, 0x1}, {0x5, 0xa}, {0x7, 0x6}, {0x2, 0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0xa}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x8}, {0x1, 0x2}, {0x4, 0x3}, {0x1, 0x1}, {0x4, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0xff81, 0x7, 0x2, 0x2b, 0x67c3, 0xf16a, 0x4]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x2}, {0x0, 0x1}, {0x7, 0x3}, {0x1, 0x7}, {0x1, 0xa}, {0x0, 0x2}, {0x4, 0x1}, {0x1, 0x7}, {0x4, 0x6}, {0x0, 0x8}, {0x4, 0x4}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x9}, {0x1, 0x9}, {0x6, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x1, 0x3}, {0x5, 0x5}, {0x7, 0x8}, {0x3, 0x5}, {0x6, 0x3}, {0x4}, {0x2, 0x9}, {0x5, 0x7}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x2}, {0x2, 0x4}, {0x3, 0x3}, {0x1}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x3}, {0x3, 0x2}, {0x6, 0x2}, {0x0, 0x8}, {0x3, 0x3}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x6}, {0x6, 0x2}, {0x0, 0x1}, {0x0, 0x6}, {0x3, 0x3}, {}, {0x7, 0x5}, {0x3, 0x3}, {0x5, 0x5}, {0x1, 0x2}, {0x7, 0x5}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x5, 0x8, 0x6, 0x200, 0x0, 0x6438, 0x9]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0xa}]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0x7, 0x5, 0x9, 0x3ff, 0xa0, 0x7, 0x80]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x4}, {0x6, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x8, 0x1, 0x7, 0x6, 0x1, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x408f, 0x7f, 0x4010, 0x2, 0x3, 0x6, 0x81, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x2, 0x9, 0x8, 0x7, 0x7, 0x405, 0x7c48]}}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x1b, 0x1, 0x18, 0xb, 0x0, 0x3, 0x2, 0xc, 0x18, 0x5, 0x24, 0x6, 0x16, 0x36, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x737, 0x5, 0x3, 0x5, 0x3ff, 0x1, 0x40, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x41, 0x2, [{0x4, 0x2}, {0x0, 0x4}, {0x3, 0x7}, {0x1, 0x5}, {0x5, 0x6}, {0x6, 0x4}, {0x1, 0x3}, {0x6, 0x7}, {}, {0x0, 0x3}, {0x0, 0x6}, {0x3, 0x6}, {0x6, 0x7}, {0x6, 0x6}, {0x4, 0x4}, {0x2}, {0x0, 0x7}, {0x7, 0x4}, {0x6, 0x9}, {0x3, 0x2}, {0x5, 0x2}, {0x6, 0x9}, {0x1, 0x9}, {0x2, 0xa}, {0x3, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x2, 0x5}, {0x6, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x0, 0x7}, {0x0, 0x9}, {0x5, 0x6}, {0x6, 0x6}, {0x3}, {0x3, 0x3}, {0x5, 0x3}, {0x1, 0x9}, {0x6, 0x4}, {0x4, 0x8}, {0x6, 0xa}, {0x6, 0x8}, {0x3, 0x9}, {0x5}, {0x7, 0x8}, {0x2, 0x9}, {0x0, 0x4}, {0x2, 0x5}, {0x4, 0x7}, {0x1, 0x2}, {0x1, 0x2}, {0x1, 0x8}, {0x4, 0x7}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0x6}, {0x4, 0x1}, {0x2, 0x8}, {0x2, 0x8}]}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1, 0x3, 0x20, 0x2, 0x0, 0x8000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x16, 0x1, 0x256d81f07201c870, 0x5, 0x16, 0x6c, 0x60, 0x3, 0x1b, 0xc, 0x30, 0x36, 0x2, 0x5]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x9, 0xc, 0x36, 0x48, 0xc, 0xb, 0x30, 0x12, 0x5, 0x0, 0x36, 0x6c, 0x12, 0x2, 0x36, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x20, 0x80, 0x5, 0x0, 0x7f01, 0x1, 0x9, 0x1ff]}}, @NL80211_TXRATE_HT={0x28, 0x2, [{0x0, 0x9}, {0x0, 0x9}, {0x6, 0x3}, {0x6, 0x3}, {0x0, 0x5}, {0x1, 0x1}, {0x4, 0x6}, {0x6, 0x8}, {0x2, 0x8}, {0x1, 0x4}, {0x6}, {0x4, 0x8}, {0x6, 0x1}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x3}, {}, {0x4, 0x4}, {0x2, 0x3}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x3}, {0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0x8}, {0x5, 0xa}, {0x4, 0x2}, {0x1, 0xa}, {0x5, 0x3}, {0x4}, {0x5, 0x6}]}]}]}]}, 0x6fc}, 0x1, 0x0, 0x0, 0x811}, 0x8c0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:15 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2831.555948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2831.557682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2831.567300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2832.023543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2832.027374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:26 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:50:26 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r4)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r5, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20080800}, 0x8004)

03:50:26 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000700000011000001080211000020080211000000000000000000000800008700010882848b960c121824"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r3, 0xa83aba101a888d9a}], 0x1, 0x0)
recvmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000480)=""/177, 0xb1}], 0x2, &(0x7f0000000180)=""/12, 0xc}, 0x69a}], 0x1, 0x44, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="500000080211000000000000000000000000006400010000060202020276b3010882848b960c121824d737356460309d5fc590d17dc29d69feff33ce1cf4bb99f1452428939a75c77525695d29096e55513b856638f9af1cf56376bc4d5efa50d99fd8d3e79c8ac71c7b20e9dfa41c502dd87c28a4194a58919cc7c886ccdd5d96f45db909b5d013b95526c6b623b6e1cbc6b3cbfdd7d0d31cba08d488b3264b1da6ea5a7b658435315be612ee57c5"], 0x36)

03:50:26 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:50:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:50:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1cf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xce}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x40040)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2842.534663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2842.539247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2842.548467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2842.549981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2842.554942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2842.555621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2842.567180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2842.572433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2842.591557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2842.612339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2842.625520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2842.655677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:26 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2842.798530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

[ 2842.893039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="500000080211000000000000000000000000006400010000060202020276b3010882848b960c121824d737356460309d5fc590d17dc29d69feff33ce1cf4bb99f1452428939a75c77525695d29096e55513b856638f9af1cf56376bc4d5efa50d99fd8d3e79c8ac71c7b20e9dfa41c502dd87c28a4194a58919cc7c886ccdd5d96f45db909b5d013b95526c6b623b6e1cbc6b3cbfdd7d0d31cba08d488b3264b1da6ea5a7b658435315be612ee57c5"], 0x36)

03:50:26 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:50:27 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r3 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x10000, 0x1, &(0x7f0000000280)=[{&(0x7f00000001c0)="28b1441261d544f83003cae47d998d2bb45bb389c9997610b6e7dc55", 0x1c, 0x400}], 0x3000460, &(0x7f0000000380)={[{@fat=@gid}, {@nodots}, {@dots}, {@fat=@check_strict}], [{@pcr={'pcr', 0x3d, 0x40}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x33, 0x33, 0x32, 0x64, 0x32, 0x64, 0x36], 0x2d, [0x37, 0x64, 0x32, 0x35], 0x2d, [0x32, 0x32, 0x63, 0x39], 0x2d, [0x38, 0x32, 0x31, 0x64], 0x2d, [0x61, 0x66, 0x61, 0x65, 0x36, 0x34, 0x36, 0x35]}}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, ')(-&['}}, {@dont_hash}]})
splice(r3, &(0x7f00000002c0)=0x8, r0, &(0x7f0000000440)=0x3, 0x7f, 0x7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
semtimedop(0x0, &(0x7f0000000000)=[{0x1, 0x401}, {0x1, 0xf, 0x800}, {0x0, 0x5}, {0x0, 0x8, 0x1000}, {0x3, 0x8, 0x1800}, {0x2, 0x6, 0x1800}, {0x0, 0x7}, {0x1, 0x5e}, {0x4, 0x7, 0x800}, {0x2, 0x6, 0x800}], 0xa, &(0x7f0000000100)={0x0, 0x989680})

[ 2842.951691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2842.987598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:27 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2843.044955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2843.048369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:27 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000700000011000001080211000020080211000000000000000000000800008700010882848b960c121824"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r3, 0xa83aba101a888d9a}], 0x1, 0x0)
recvmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000480)=""/177, 0xb1}], 0x2, &(0x7f0000000180)=""/12, 0xc}, 0x69a}], 0x1, 0x44, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2843.066626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r4)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r5, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20080800}, 0x8004)

[ 2843.072511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2843.087769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2843.101158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2843.170233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2843.196189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2843.220624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2843.235038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2843.417958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2846.254992] Bluetooth: hci2: command 0x0406 tx timeout
03:50:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r4)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r5, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20080800}, 0x8004)

03:50:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:50:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000700000011000001080211000020080211000000000000000000000800008700010882848b960c121824"], 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="f3f127923d9298723457c68887ff5d2803b1eb9301631927bd921787ed63a60b172f1f0f598671d9d158edea13e4866eff62e148a0ecc18a9c9d8e33336039ed12dbae6ab4935bb94c4b4d8b703f135616011d4bd479045cd1fbc23e3ad5708589a226509710cda87f195110341dedabd5b7eb0fde59175c2eb982d191ea05b6b1efc8", 0xff35}, {&(0x7f0000000300)="41d939c83ab9bc5529e6391853e876fa987167d64a2f6fc2aca35e62e84b09de8199275ba25aff2a6f2f163f037acf5bc208b0599fcedba9c03004", 0x4b}, {&(0x7f0000000180)="8f696bf6e72e977fe9f0e653b17e81a55790cad4029efa1597ed1a8833efe24f86632bc33e6c9cab67ed9de5912b51fb5b8f16", 0x33}, {&(0x7f00000001c0)="ba231270da60c03da58c9d977fb2f27d858f6db73132e4fede5bd2fc6ab3abe53b2a8fe2af84f2f6164ca3b8cf94b09fd33f3fbab013a5fbb4f152878933467b33bb48c0b397e987e69895b84aaeb5e138b8edd9ade06e62843e92607aa8b40014e410f58b69f5cb873b2a549b8f6ec3d9fa86596b5c3dcf390c275d4812719969d20d71acd82de727fa339ae5a57fd653cf22d80eefd1b0e2b38591539d8aca872c8acb91ec2e7b0d571392ef13d4a6d2739e6edce1d1c9fb20a7c711f4b36abc67a4047e48ffb0b29d4431aa2c496f188fff094f144274", 0xd8}], 0x4)
poll(&(0x7f00000000c0)=[{r3, 0xa83aba101a888d9a}], 0x1, 0x0)
recvmmsg(r3, &(0x7f00000001c0)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)=""/206, 0xce}, {&(0x7f0000000480)=""/177, 0xb1}], 0x2, &(0x7f0000000180)=""/12, 0xc}, 0x69a}], 0x1, 0x44, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x208000, 0x141, 0x10}, 0x18)
sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xf0, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd4a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4211}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x20, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20004840}, 0x81)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:50:36 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:50:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r3 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x10000, 0x1, &(0x7f0000000280)=[{&(0x7f00000001c0)="28b1441261d544f83003cae47d998d2bb45bb389c9997610b6e7dc55", 0x1c, 0x400}], 0x3000460, &(0x7f0000000380)={[{@fat=@gid}, {@nodots}, {@dots}, {@fat=@check_strict}], [{@pcr={'pcr', 0x3d, 0x40}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x33, 0x33, 0x32, 0x64, 0x32, 0x64, 0x36], 0x2d, [0x37, 0x64, 0x32, 0x35], 0x2d, [0x32, 0x32, 0x63, 0x39], 0x2d, [0x38, 0x32, 0x31, 0x64], 0x2d, [0x61, 0x66, 0x61, 0x65, 0x36, 0x34, 0x36, 0x35]}}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, ')(-&['}}, {@dont_hash}]})
splice(r3, &(0x7f00000002c0)=0x8, r0, &(0x7f0000000440)=0x3, 0x7f, 0x7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
semtimedop(0x0, &(0x7f0000000000)=[{0x1, 0x401}, {0x1, 0xf, 0x800}, {0x0, 0x5}, {0x0, 0x8, 0x1000}, {0x3, 0x8, 0x1800}, {0x2, 0x6, 0x1800}, {0x0, 0x7}, {0x1, 0x5e}, {0x4, 0x7, 0x800}, {0x2, 0x6, 0x800}], 0xa, &(0x7f0000000100)={0x0, 0x989680})

03:50:36 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2852.234158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.235347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.236232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.249212] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.250942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.259232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.269037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.279289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.289021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.301519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.305605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.311027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.327498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.560364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:36 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:50:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r3 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x10000, 0x1, &(0x7f0000000280)=[{&(0x7f00000001c0)="28b1441261d544f83003cae47d998d2bb45bb389c9997610b6e7dc55", 0x1c, 0x400}], 0x3000460, &(0x7f0000000380)={[{@fat=@gid}, {@nodots}, {@dots}, {@fat=@check_strict}], [{@pcr={'pcr', 0x3d, 0x40}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x33, 0x33, 0x32, 0x64, 0x32, 0x64, 0x36], 0x2d, [0x37, 0x64, 0x32, 0x35], 0x2d, [0x32, 0x32, 0x63, 0x39], 0x2d, [0x38, 0x32, 0x31, 0x64], 0x2d, [0x61, 0x66, 0x61, 0x65, 0x36, 0x34, 0x36, 0x35]}}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, ')(-&['}}, {@dont_hash}]})
splice(r3, &(0x7f00000002c0)=0x8, r0, &(0x7f0000000440)=0x3, 0x7f, 0x7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
semtimedop(0x0, &(0x7f0000000000)=[{0x1, 0x401}, {0x1, 0xf, 0x800}, {0x0, 0x5}, {0x0, 0x8, 0x1000}, {0x3, 0x8, 0x1800}, {0x2, 0x6, 0x1800}, {0x0, 0x7}, {0x1, 0x5e}, {0x4, 0x7, 0x800}, {0x2, 0x6, 0x800}], 0xa, &(0x7f0000000100)={0x0, 0x989680})

03:50:36 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:50:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:50:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

[ 2852.665298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.667442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.675356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.683359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.692211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.702564] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r4)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r5, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

03:50:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 1)

[ 2852.758611] FAULT_INJECTION: forcing a failure.
[ 2852.758611] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2852.760434] CPU: 1 UID: 0 PID: 256090 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2852.760484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2852.760505] Call Trace:
[ 2852.760517]  <TASK>
[ 2852.760532]  dump_stack_lvl+0xfa/0x120
[ 2852.760591]  should_fail_ex+0x4d7/0x5e0
[ 2852.760630]  _copy_from_user+0x30/0xd0
[ 2852.760664]  move_addr_to_kernel.part.0+0x40/0x120
[ 2852.760700]  __sys_sendto+0x1da/0x570
[ 2852.760731]  ? __pfx___sys_sendto+0x10/0x10
[ 2852.760764]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2852.760802]  ? __fget_files+0x20d/0x3b0
[ 2852.760843]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2852.760879]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2852.760916]  ? ksys_write+0x1a3/0x240
[ 2852.760949]  ? __pfx_ksys_write+0x10/0x10
[ 2852.760988]  __x64_sys_sendto+0xe1/0x1c0
[ 2852.761009]  ? do_syscall_64+0x85/0x360
[ 2852.761042]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 2852.761078]  do_syscall_64+0xbf/0x360
[ 2852.761113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2852.761137] RIP: 0033:0x7f35d85b18ac
[ 2852.761154] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2852.761176] RSP: 002b:00007f35d5b73020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2852.761199] RAX: ffffffffffffffda RBX: 00007f35d5b73110 RCX: 00007f35d85b18ac
[ 2852.761215] RDX: 0000000000000020 RSI: 00007f35d5b73160 RDI: 0000000000000003
[ 2852.761229] RBP: 0000000000000000 R08: 00007f35d5b73074 R09: 000000000000000c
[ 2852.761243] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f35d5b730c8
[ 2852.761257] R13: 00007f35d5b73160 R14: 0000000000000003 R15: 0000000000000000
[ 2852.761289]  </TASK>
[ 2852.786917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.805274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.808274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 2)

[ 2852.848253] FAULT_INJECTION: forcing a failure.
[ 2852.848253] name failslab, interval 1, probability 0, space 0, times 0
[ 2852.849323] CPU: 0 UID: 0 PID: 256160 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2852.849340] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2852.849348] Call Trace:
[ 2852.849353]  <TASK>
[ 2852.849358]  dump_stack_lvl+0xfa/0x120
[ 2852.849382]  should_fail_ex+0x4d7/0x5e0
[ 2852.849401]  should_failslab+0xc2/0x120
[ 2852.849415]  kmem_cache_alloc_node_noprof+0x71/0x470
[ 2852.849433]  ? __might_fault+0xe0/0x190
[ 2852.849446]  ? __alloc_skb+0x2ab/0x370
[ 2852.849464]  __alloc_skb+0x2ab/0x370
[ 2852.849477]  ? __pfx___alloc_skb+0x10/0x10
[ 2852.849489]  ? selinux_socket_getpeersec_dgram+0x236/0x360
[ 2852.849508]  ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10
[ 2852.849532]  netlink_alloc_large_skb+0x69/0x150
[ 2852.849549]  netlink_sendmsg+0x676/0xd80
[ 2852.849566]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2852.849587]  __sys_sendto+0x506/0x570
[ 2852.849601]  ? __pfx___sys_sendto+0x10/0x10
[ 2852.849619]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2852.849645]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2852.849665]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2852.849685]  ? ksys_write+0x1a3/0x240
[ 2852.849709]  ? __pfx_ksys_write+0x10/0x10
[ 2852.849729]  __x64_sys_sendto+0xe1/0x1c0
[ 2852.849740]  ? do_syscall_64+0x85/0x360
[ 2852.849759]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 2852.849778]  do_syscall_64+0xbf/0x360
[ 2852.849797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2852.849811] RIP: 0033:0x7f35d85b18ac
[ 2852.849821] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2852.849833] RSP: 002b:00007f35d5b73020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2852.849848] RAX: ffffffffffffffda RBX: 00007f35d5b73110 RCX: 00007f35d85b18ac
[ 2852.849859] RDX: 0000000000000020 RSI: 00007f35d5b73160 RDI: 0000000000000003
[ 2852.849867] RBP: 0000000000000000 R08: 00007f35d5b73074 R09: 000000000000000c
[ 2852.849874] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f35d5b730c8
[ 2852.849882] R13: 00007f35d5b73160 R14: 0000000000000003 R15: 0000000000000000
[ 2852.849899]  </TASK>
03:50:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0, r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:50:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 3)

[ 2852.957944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2852.983833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:50:45 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:46 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:50:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 4)

03:50:46 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:50:46 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r3 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x10000, 0x1, &(0x7f0000000280)=[{&(0x7f00000001c0)="28b1441261d544f83003cae47d998d2bb45bb389c9997610b6e7dc55", 0x1c, 0x400}], 0x3000460, &(0x7f0000000380)={[{@fat=@gid}, {@nodots}, {@dots}, {@fat=@check_strict}], [{@pcr={'pcr', 0x3d, 0x40}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x33, 0x33, 0x32, 0x64, 0x32, 0x64, 0x36], 0x2d, [0x37, 0x64, 0x32, 0x35], 0x2d, [0x32, 0x32, 0x63, 0x39], 0x2d, [0x38, 0x32, 0x31, 0x64], 0x2d, [0x61, 0x66, 0x61, 0x65, 0x36, 0x34, 0x36, 0x35]}}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, ')(-&['}}, {@dont_hash}]})
splice(r3, &(0x7f00000002c0)=0x8, r0, &(0x7f0000000440)=0x3, 0x7f, 0x7)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:50:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) (fail_nth: 1)

03:50:46 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

03:50:46 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2862.008478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2862.054378] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2862.058553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2862.058701] FAULT_INJECTION: forcing a failure.
[ 2862.058701] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2862.061568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2862.061912] CPU: 1 UID: 0 PID: 256221 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2862.061946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2862.061962] Call Trace:
[ 2862.061971]  <TASK>
[ 2862.061981]  dump_stack_lvl+0xfa/0x120
[ 2862.062023]  should_fail_ex+0x4d7/0x5e0
[ 2862.062056]  _copy_from_user+0x30/0xd0
[ 2862.062091]  copy_msghdr_from_user+0x88/0x150
[ 2862.062122]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2862.062162]  ? lock_acquire+0x15e/0x2f0
[ 2862.062196]  ___sys_sendmsg+0xdc/0x1b0
[ 2862.062226]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2862.062260]  ? proc_fail_nth_write+0x98/0x250
[ 2862.062303]  ? lock_acquire+0x15e/0x2f0
[ 2862.062329]  ? __fget_files+0x34/0x3b0
[ 2862.062364]  ? find_held_lock+0x2b/0x80
[ 2862.062399]  ? __fget_files+0x203/0x3b0
[ 2862.062434]  ? lock_release+0xc8/0x290
[ 2862.062465]  ? __fget_files+0x20d/0x3b0
[ 2862.062512]  __sys_sendmsg+0x150/0x200
[ 2862.062539]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2862.062571]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2862.062610]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2862.062650]  ? ksys_write+0x1a3/0x240
[ 2862.062687]  ? __pfx_ksys_write+0x10/0x10
[ 2862.062743]  do_syscall_64+0xbf/0x360
[ 2862.062781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2862.062807] RIP: 0033:0x7f9747b96b19
[ 2862.062826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2862.062850] RSP: 002b:00007f974510c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2862.062874] RAX: ffffffffffffffda RBX: 00007f9747ca9f60 RCX: 00007f9747b96b19
[ 2862.062891] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[ 2862.062906] RBP: 00007f974510c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2862.062921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2862.062936] R13: 00007ffd5d9f4bbf R14: 00007f974510c300 R15: 0000000000022000
[ 2862.062971]  </TASK>
03:50:46 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 5)

[ 2862.116469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2862.138337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2862.161381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2862.468252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2864.825621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2864.828792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2864.837003] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2864.842181] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2864.846229] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2866.861866] Bluetooth: hci2: command tx timeout
[ 2868.909856] Bluetooth: hci2: command tx timeout
[ 2870.957821] Bluetooth: hci2: command tx timeout
[ 2873.007155] Bluetooth: hci2: command tx timeout
[ 2884.223640] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2884.224766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2884.317956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2884.319039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2884.656408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2884.666836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:51:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) (fail_nth: 2)

03:51:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

03:51:18 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:51:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 6)

03:51:18 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x2c}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:51:18 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:51:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r3 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x10000, 0x1, &(0x7f0000000280)=[{&(0x7f00000001c0)="28b1441261d544f83003cae47d998d2bb45bb389c9997610b6e7dc55", 0x1c, 0x400}], 0x3000460, &(0x7f0000000380)={[{@fat=@gid}, {@nodots}, {@dots}, {@fat=@check_strict}], [{@pcr={'pcr', 0x3d, 0x40}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x33, 0x33, 0x32, 0x64, 0x32, 0x64, 0x36], 0x2d, [0x37, 0x64, 0x32, 0x35], 0x2d, [0x32, 0x32, 0x63, 0x39], 0x2d, [0x38, 0x32, 0x31, 0x64], 0x2d, [0x61, 0x66, 0x61, 0x65, 0x36, 0x34, 0x36, 0x35]}}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, ')(-&['}}, {@dont_hash}]})
splice(r3, &(0x7f00000002c0)=0x8, r0, &(0x7f0000000440)=0x3, 0x7f, 0x7)

03:51:18 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2894.730456] FAULT_INJECTION: forcing a failure.
[ 2894.730456] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2894.731585] CPU: 0 UID: 0 PID: 256801 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2894.731603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2894.731611] Call Trace:
[ 2894.731616]  <TASK>
[ 2894.731621]  dump_stack_lvl+0xfa/0x120
[ 2894.731646]  should_fail_ex+0x4d7/0x5e0
[ 2894.731664]  _copy_from_iter+0x1dc/0x15b0
[ 2894.731682]  ? lock_acquire+0x15e/0x2f0
[ 2894.731697]  ? __virt_addr_valid+0x1c6/0x5d0
[ 2894.731721]  ? find_held_lock+0x2b/0x80
[ 2894.731740]  ? __pfx__copy_from_iter+0x10/0x10
[ 2894.731755]  ? lock_release+0xc8/0x290
[ 2894.731771]  ? __virt_addr_valid+0x100/0x5d0
[ 2894.731792]  ? __check_object_size+0x57b/0x880
[ 2894.731816]  netlink_sendmsg+0x809/0xd80
[ 2894.731835]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2894.731857]  __sys_sendto+0x506/0x570
[ 2894.731872]  ? __pfx___sys_sendto+0x10/0x10
[ 2894.731890]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2894.731916]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2894.731937]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2894.731956]  ? ksys_write+0x1a3/0x240
[ 2894.731976]  ? __pfx_ksys_write+0x10/0x10
[ 2894.731997]  __x64_sys_sendto+0xe1/0x1c0
[ 2894.732008]  ? do_syscall_64+0x85/0x360
[ 2894.732029]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 2894.732049]  do_syscall_64+0xbf/0x360
[ 2894.732068]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2894.732081] RIP: 0033:0x7f35d85b18ac
[ 2894.732091] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2894.732103] RSP: 002b:00007f35d5b73020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2894.732116] RAX: ffffffffffffffda RBX: 00007f35d5b73110 RCX: 00007f35d85b18ac
[ 2894.732124] RDX: 0000000000000020 RSI: 00007f35d5b73160 RDI: 0000000000000003
[ 2894.732132] RBP: 0000000000000000 R08: 00007f35d5b73074 R09: 000000000000000c
[ 2894.732140] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f35d5b730c8
[ 2894.732148] R13: 00007f35d5b73160 R14: 0000000000000003 R15: 0000000000000000
[ 2894.732166]  </TASK>
[ 2894.753264] FAULT_INJECTION: forcing a failure.
[ 2894.753264] name failslab, interval 1, probability 0, space 0, times 0
[ 2894.754255] CPU: 0 UID: 0 PID: 256800 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2894.754272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2894.754279] Call Trace:
[ 2894.754283]  <TASK>
[ 2894.754288]  dump_stack_lvl+0xfa/0x120
[ 2894.754307]  should_fail_ex+0x4d7/0x5e0
[ 2894.754323]  should_failslab+0xc2/0x120
[ 2894.754337]  kmem_cache_alloc_node_noprof+0x71/0x470
[ 2894.754356]  ? __alloc_skb+0x2ab/0x370
[ 2894.754374]  __alloc_skb+0x2ab/0x370
[ 2894.754386]  ? __pfx___alloc_skb+0x10/0x10
[ 2894.754401]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[ 2894.754419]  netlink_alloc_large_skb+0x69/0x150
[ 2894.754433]  netlink_sendmsg+0x676/0xd80
[ 2894.754450]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2894.754472]  ____sys_sendmsg+0xa67/0xc20
[ 2894.754490]  ? copy_msghdr_from_user+0xfb/0x150
[ 2894.754507]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2894.754529]  ? lock_acquire+0x15e/0x2f0
[ 2894.754545]  ___sys_sendmsg+0x10f/0x1b0
[ 2894.754559]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2894.754576]  ? proc_fail_nth_write+0x98/0x250
[ 2894.754598]  ? lock_acquire+0x15e/0x2f0
[ 2894.754611]  ? __fget_files+0x34/0x3b0
[ 2894.754629]  ? find_held_lock+0x2b/0x80
[ 2894.754646]  ? __fget_files+0x203/0x3b0
[ 2894.754664]  ? lock_release+0xc8/0x290
[ 2894.754679]  ? __fget_files+0x20d/0x3b0
[ 2894.754707]  __sys_sendmsg+0x150/0x200
[ 2894.754720]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2894.754740]  ? __pfx_ksys_write+0x10/0x10
[ 2894.754764]  do_syscall_64+0xbf/0x360
[ 2894.754783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2894.754795] RIP: 0033:0x7f9747b96b19
[ 2894.754804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2894.754816] RSP: 002b:00007f974510c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2894.754828] RAX: ffffffffffffffda RBX: 00007f9747ca9f60 RCX: 00007f9747b96b19
[ 2894.754836] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[ 2894.754843] RBP: 00007f974510c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2894.754851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2894.754858] R13: 00007ffd5d9f4bbf R14: 00007f974510c300 R15: 0000000000022000
[ 2894.754876]  </TASK>
[ 2894.771155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2894.771266] hpet: Lost 1 RTC interrupts
[ 2894.774017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2894.774198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2894.776670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2894.783659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:51:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) (fail_nth: 3)

03:51:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 7)

[ 2894.837442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2894.842509] FAULT_INJECTION: forcing a failure.
[ 2894.842509] name failslab, interval 1, probability 0, space 0, times 0
[ 2894.843557] CPU: 0 UID: 0 PID: 256824 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2894.843574] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2894.843582] Call Trace:
[ 2894.843587]  <TASK>
[ 2894.843592]  dump_stack_lvl+0xfa/0x120
[ 2894.843614]  should_fail_ex+0x4d7/0x5e0
[ 2894.843632]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290
[ 2894.843650]  should_failslab+0xc2/0x120
[ 2894.843664]  __kmalloc_noprof+0xb4/0x4b0
[ 2894.843683]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 2894.843706]  genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290
[ 2894.843727]  genl_family_rcv_msg_doit+0xab/0x2f0
[ 2894.843744]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2894.843761]  ? __pfx___mutex_lock+0x10/0x10
[ 2894.843779]  ? __pfx_genl_get_cmd+0x10/0x10
[ 2894.843793]  ? __kernel_text_address+0xd/0x40
[ 2894.843808]  ? unwind_get_return_address+0x59/0xa0
[ 2894.843826]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 2894.843845]  ? arch_stack_walk+0x9c/0xf0
[ 2894.843859]  ? __radix_tree_lookup+0x1f7/0x290
[ 2894.843881]  genl_rcv_msg+0x532/0x7e0
[ 2894.843899]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2894.843916]  ? __pfx_ctrl_getfamily+0x10/0x10
[ 2894.843936]  ? __lock_acquire+0x694/0x1b70
[ 2894.843953]  netlink_rcv_skb+0x147/0x430
[ 2894.843967]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2894.843984]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2894.844006]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2894.844019]  ? is_vmalloc_addr+0x86/0xa0
[ 2894.844040]  genl_rcv+0x28/0x40
[ 2894.844053]  netlink_unicast+0x58d/0x850
[ 2894.844070]  ? __pfx_netlink_unicast+0x10/0x10
[ 2894.844090]  netlink_sendmsg+0x8ac/0xd80
[ 2894.844108]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2894.844129]  __sys_sendto+0x506/0x570
[ 2894.844144]  ? __pfx___sys_sendto+0x10/0x10
[ 2894.844162]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2894.844187]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2894.844208]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2894.844227]  ? ksys_write+0x1a3/0x240
[ 2894.844248]  ? __pfx_ksys_write+0x10/0x10
[ 2894.844269]  __x64_sys_sendto+0xe1/0x1c0
[ 2894.844280]  ? do_syscall_64+0x85/0x360
[ 2894.844299]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 2894.844319]  do_syscall_64+0xbf/0x360
[ 2894.844338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2894.844351] RIP: 0033:0x7f35d85b18ac
[ 2894.844361] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2894.844372] RSP: 002b:00007f35d5b73020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2894.844385] RAX: ffffffffffffffda RBX: 00007f35d5b73110 RCX: 00007f35d85b18ac
[ 2894.844393] RDX: 0000000000000020 RSI: 00007f35d5b73160 RDI: 0000000000000003
[ 2894.844401] RBP: 0000000000000000 R08: 00007f35d5b73074 R09: 000000000000000c
[ 2894.844408] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f35d5b730c8
[ 2894.844416] R13: 00007f35d5b73160 R14: 0000000000000003 R15: 0000000000000000
[ 2894.844434]  </TASK>
[ 2894.865186] hpet: Lost 1 RTC interrupts
03:51:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) (fail_nth: 4)

[ 2894.891602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:51:18 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 8)

03:51:18 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) (fail_nth: 5)

[ 2895.217159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:51:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 9)

03:51:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x5, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:51:28 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:51:28 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

03:51:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:51:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
splice(0xffffffffffffffff, &(0x7f00000002c0)=0x8, r0, &(0x7f0000000440)=0x3, 0x7f, 0x7)

03:51:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:51:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) (fail_nth: 6)

[ 2904.303087] FAULT_INJECTION: forcing a failure.
[ 2904.303087] name failslab, interval 1, probability 0, space 0, times 0
[ 2904.304308] CPU: 1 UID: 0 PID: 256926 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2904.304325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2904.304334] Call Trace:
[ 2904.304339]  <TASK>
[ 2904.304344]  dump_stack_lvl+0xfa/0x120
[ 2904.304369]  should_fail_ex+0x4d7/0x5e0
[ 2904.304387]  should_failslab+0xc2/0x120
[ 2904.304401]  __kmalloc_cache_noprof+0x73/0x470
[ 2904.304421]  ? __request_module+0x274/0x630
[ 2904.304437]  ? ctrl_getfamily+0x1db/0x540
[ 2904.304455]  ? __request_module+0x274/0x630
[ 2904.304466]  __request_module+0x274/0x630
[ 2904.304478]  ? __pfx___request_module+0x10/0x10
[ 2904.304491]  ? __mutex_unlock_slowpath+0x157/0x650
[ 2904.304515]  ? __up_read+0x197/0x750
[ 2904.304534]  ? __pfx___up_read+0x10/0x10
[ 2904.304556]  ctrl_getfamily+0x1db/0x540
[ 2904.304572]  ? __pfx_ctrl_getfamily+0x10/0x10
[ 2904.304589]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2904.304606]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2904.304627]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2904.304643]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2904.304667]  ? __radix_tree_lookup+0x1f7/0x290
[ 2904.304688]  genl_rcv_msg+0x532/0x7e0
[ 2904.304710]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2904.304727]  ? __pfx_ctrl_getfamily+0x10/0x10
[ 2904.304746]  ? __lock_acquire+0x694/0x1b70
[ 2904.304763]  netlink_rcv_skb+0x147/0x430
[ 2904.304779]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2904.304796]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2904.304818]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2904.304830]  ? is_vmalloc_addr+0x86/0xa0
[ 2904.304860]  genl_rcv+0x28/0x40
[ 2904.304873]  netlink_unicast+0x58d/0x850
[ 2904.304890]  ? __pfx_netlink_unicast+0x10/0x10
[ 2904.304909]  netlink_sendmsg+0x8ac/0xd80
[ 2904.304926]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2904.304948]  __sys_sendto+0x506/0x570
[ 2904.304962]  ? __pfx___sys_sendto+0x10/0x10
[ 2904.304980]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2904.305005]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2904.305025]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2904.305045]  ? ksys_write+0x1a3/0x240
[ 2904.305065]  ? __pfx_ksys_write+0x10/0x10
[ 2904.305086]  __x64_sys_sendto+0xe1/0x1c0
[ 2904.305098]  ? do_syscall_64+0x85/0x360
[ 2904.305117]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 2904.305138]  do_syscall_64+0xbf/0x360
[ 2904.305156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2904.305170] RIP: 0033:0x7f35d85b18ac
[ 2904.305180] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2904.305192] RSP: 002b:00007f35d5b73020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2904.305205] RAX: ffffffffffffffda RBX: 00007f35d5b73110 RCX: 00007f35d85b18ac
[ 2904.305213] RDX: 0000000000000020 RSI: 00007f35d5b73160 RDI: 0000000000000003
[ 2904.305221] RBP: 0000000000000000 R08: 00007f35d5b73074 R09: 000000000000000c
[ 2904.305229] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f35d5b730c8
[ 2904.305236] R13: 00007f35d5b73160 R14: 0000000000000003 R15: 0000000000000000
[ 2904.305254]  </TASK>
[ 2904.330316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2904.368377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2904.385110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:51:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 10)

[ 2904.397639] FAULT_INJECTION: forcing a failure.
[ 2904.397639] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2904.399714] CPU: 0 UID: 0 PID: 256939 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2904.399749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2904.399764] Call Trace:
[ 2904.399772]  <TASK>
[ 2904.399782]  dump_stack_lvl+0xfa/0x120
[ 2904.399824]  should_fail_ex+0x4d7/0x5e0
[ 2904.399858]  _copy_from_iter+0x1dc/0x15b0
[ 2904.399893]  ? lock_acquire+0x15e/0x2f0
[ 2904.399919]  ? __virt_addr_valid+0x1c6/0x5d0
[ 2904.399957]  ? find_held_lock+0x2b/0x80
[ 2904.399993]  ? __pfx__copy_from_iter+0x10/0x10
[ 2904.400023]  ? lock_release+0xc8/0x290
[ 2904.400055]  ? __virt_addr_valid+0x100/0x5d0
[ 2904.400092]  ? __check_object_size+0x57b/0x880
[ 2904.400132]  netlink_sendmsg+0x809/0xd80
[ 2904.400168]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2904.400210]  ____sys_sendmsg+0xa67/0xc20
[ 2904.400247]  ? copy_msghdr_from_user+0xfb/0x150
[ 2904.400274]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2904.400320]  ? lock_acquire+0x15e/0x2f0
[ 2904.400351]  ___sys_sendmsg+0x10f/0x1b0
[ 2904.400379]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2904.400413]  ? proc_fail_nth_write+0x98/0x250
[ 2904.400456]  ? lock_acquire+0x15e/0x2f0
[ 2904.400481]  ? __fget_files+0x34/0x3b0
[ 2904.400517]  ? find_held_lock+0x2b/0x80
[ 2904.400551]  ? __fget_files+0x203/0x3b0
[ 2904.400585]  ? lock_release+0xc8/0x290
[ 2904.400617]  ? __fget_files+0x20d/0x3b0
[ 2904.400664]  __sys_sendmsg+0x150/0x200
[ 2904.400690]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2904.400729]  ? __pfx_ksys_write+0x10/0x10
[ 2904.400778]  do_syscall_64+0xbf/0x360
[ 2904.400819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2904.400844] RIP: 0033:0x7f9747b96b19
[ 2904.400882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2904.400906] RSP: 002b:00007f974510c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2904.400929] RAX: ffffffffffffffda RBX: 00007f9747ca9f60 RCX: 00007f9747b96b19
[ 2904.400946] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[ 2904.400961] RBP: 00007f974510c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2904.400977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2904.400991] R13: 00007ffd5d9f4bbf R14: 00007f974510c300 R15: 0000000000022000
[ 2904.401027]  </TASK>
[ 2904.415077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2904.419532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2904.440838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2904.473139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:51:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 11)

[ 2904.490948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:51:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) (fail_nth: 7)

[ 2904.512339] FAULT_INJECTION: forcing a failure.
[ 2904.512339] name failslab, interval 1, probability 0, space 0, times 0
[ 2904.513310] CPU: 1 UID: 0 PID: 256944 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2904.513327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2904.513335] Call Trace:
[ 2904.513340]  <TASK>
[ 2904.513345]  dump_stack_lvl+0xfa/0x120
[ 2904.513369]  should_fail_ex+0x4d7/0x5e0
[ 2904.513387]  should_failslab+0xc2/0x120
[ 2904.513401]  __kmalloc_node_track_caller_noprof+0xb8/0x490
[ 2904.513423]  ? __request_module+0x292/0x630
[ 2904.513438]  ? ctrl_getfamily+0x1db/0x540
[ 2904.513456]  kstrdup+0x3e/0xc0
[ 2904.513475]  __request_module+0x292/0x630
[ 2904.513486]  ? __pfx___request_module+0x10/0x10
[ 2904.513500]  ? __mutex_unlock_slowpath+0x157/0x650
[ 2904.513523]  ? __up_read+0x197/0x750
[ 2904.513541]  ? __pfx___up_read+0x10/0x10
[ 2904.513562]  ctrl_getfamily+0x1db/0x540
[ 2904.513578]  ? __pfx_ctrl_getfamily+0x10/0x10
[ 2904.513595]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2904.513612]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2904.513633]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2904.513650]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2904.513673]  ? __radix_tree_lookup+0x1f7/0x290
[ 2904.513695]  genl_rcv_msg+0x532/0x7e0
[ 2904.513717]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2904.513733]  ? __pfx_ctrl_getfamily+0x10/0x10
[ 2904.513753]  ? __lock_acquire+0x694/0x1b70
[ 2904.513769]  netlink_rcv_skb+0x147/0x430
[ 2904.513783]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2904.513800]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2904.513822]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2904.513835]  ? is_vmalloc_addr+0x86/0xa0
[ 2904.513856]  genl_rcv+0x28/0x40
[ 2904.513869]  netlink_unicast+0x58d/0x850
[ 2904.513886]  ? __pfx_netlink_unicast+0x10/0x10
[ 2904.513906]  netlink_sendmsg+0x8ac/0xd80
[ 2904.513923]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2904.513944]  __sys_sendto+0x506/0x570
[ 2904.513959]  ? __pfx___sys_sendto+0x10/0x10
[ 2904.513977]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2904.514002]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2904.514022]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2904.514042]  ? ksys_write+0x1a3/0x240
[ 2904.514063]  ? __pfx_ksys_write+0x10/0x10
[ 2904.514084]  __x64_sys_sendto+0xe1/0x1c0
[ 2904.514096]  ? do_syscall_64+0x85/0x360
[ 2904.514116]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 2904.514136]  do_syscall_64+0xbf/0x360
[ 2904.514155]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2904.514168] RIP: 0033:0x7f35d85b18ac
[ 2904.514178] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2904.514190] RSP: 002b:00007f35d5b73020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2904.514202] RAX: ffffffffffffffda RBX: 00007f35d5b73110 RCX: 00007f35d85b18ac
[ 2904.514211] RDX: 0000000000000020 RSI: 00007f35d5b73160 RDI: 0000000000000003
[ 2904.514218] RBP: 0000000000000000 R08: 00007f35d5b73074 R09: 000000000000000c
[ 2904.514226] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f35d5b730c8
[ 2904.514234] R13: 00007f35d5b73160 R14: 0000000000000003 R15: 0000000000000000
[ 2904.514252]  </TASK>
[ 2904.569136] FAULT_INJECTION: forcing a failure.
[ 2904.569136] name failslab, interval 1, probability 0, space 0, times 0
[ 2904.571107] CPU: 0 UID: 0 PID: 256946 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2904.571140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2904.571154] Call Trace:
[ 2904.571163]  <TASK>
[ 2904.571180]  dump_stack_lvl+0xfa/0x120
[ 2904.571220]  should_fail_ex+0x4d7/0x5e0
[ 2904.571252]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290
[ 2904.571287]  should_failslab+0xc2/0x120
[ 2904.571313]  __kmalloc_noprof+0xb4/0x4b0
[ 2904.571352]  ? avc_has_perm_noaudit+0x150/0x3d0
[ 2904.571389]  genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290
[ 2904.571431]  genl_family_rcv_msg_doit+0xab/0x2f0
[ 2904.571464]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2904.571503]  ? cap_capable+0xdb/0x3b0
[ 2904.571546]  ? security_capable+0x2f/0x90
[ 2904.571584]  ? ns_capable+0xe2/0x120
[ 2904.571621]  genl_rcv_msg+0x532/0x7e0
[ 2904.571657]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2904.571689]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 2904.571720]  ? __pfx_nl80211_register_beacons+0x10/0x10
[ 2904.571756]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 2904.571802]  ? __lock_acquire+0x694/0x1b70
[ 2904.571834]  netlink_rcv_skb+0x147/0x430
[ 2904.571862]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2904.571895]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2904.571940]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2904.571964]  ? is_vmalloc_addr+0x86/0xa0
[ 2904.572004]  genl_rcv+0x28/0x40
[ 2904.572031]  netlink_unicast+0x58d/0x850
[ 2904.572064]  ? __pfx_netlink_unicast+0x10/0x10
[ 2904.572104]  netlink_sendmsg+0x8ac/0xd80
[ 2904.572138]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2904.572181]  ____sys_sendmsg+0xa67/0xc20
[ 2904.572219]  ? copy_msghdr_from_user+0xfb/0x150
[ 2904.572246]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2904.572293]  ? lock_acquire+0x15e/0x2f0
[ 2904.572325]  ___sys_sendmsg+0x10f/0x1b0
[ 2904.572355]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2904.572390]  ? proc_fail_nth_write+0x98/0x250
[ 2904.572433]  ? lock_acquire+0x15e/0x2f0
[ 2904.572458]  ? __fget_files+0x34/0x3b0
[ 2904.572494]  ? find_held_lock+0x2b/0x80
[ 2904.572529]  ? __fget_files+0x203/0x3b0
[ 2904.572563]  ? lock_release+0xc8/0x290
[ 2904.572594]  ? __fget_files+0x20d/0x3b0
[ 2904.572642]  __sys_sendmsg+0x150/0x200
[ 2904.572669]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2904.572709]  ? __pfx_ksys_write+0x10/0x10
[ 2904.572759]  do_syscall_64+0xbf/0x360
[ 2904.572797]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2904.572822] RIP: 0033:0x7f9747b96b19
[ 2904.572841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2904.572875] RSP: 002b:00007f974510c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2904.572899] RAX: ffffffffffffffda RBX: 00007f9747ca9f60 RCX: 00007f9747b96b19
[ 2904.572915] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[ 2904.572930] RBP: 00007f974510c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2904.572946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2904.572961] R13: 00007ffd5d9f4bbf R14: 00007f974510c300 R15: 0000000000022000
[ 2904.572997]  </TASK>
[ 2904.618182] hpet: Lost 2 RTC interrupts
03:51:28 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
splice(0xffffffffffffffff, &(0x7f00000002c0)=0x8, r0, &(0x7f0000000440)=0x3, 0x7f, 0x7)

03:51:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 12)

03:51:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) (fail_nth: 8)

[ 2904.726916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:51:28 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:51:28 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x6, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

[ 2904.821027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:51:28 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 13)

03:51:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) (fail_nth: 9)

03:51:28 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

[ 2904.894102] FAULT_INJECTION: forcing a failure.
[ 2904.894102] name failslab, interval 1, probability 0, space 0, times 0
[ 2904.895249] CPU: 1 UID: 0 PID: 256959 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2904.895271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2904.895281] Call Trace:
[ 2904.895287]  <TASK>
[ 2904.895292]  dump_stack_lvl+0xfa/0x120
[ 2904.895318]  should_fail_ex+0x4d7/0x5e0
[ 2904.895336]  should_failslab+0xc2/0x120
[ 2904.895350]  __kmalloc_cache_noprof+0x73/0x470
[ 2904.895367]  ? kasan_save_track+0x14/0x30
[ 2904.895381]  ? __kasan_kmalloc+0x7f/0x90
[ 2904.895392]  ? call_usermodehelper_setup+0xa9/0x330
[ 2904.895410]  ? trace_kmalloc+0x1f/0xb0
[ 2904.895425]  ? call_usermodehelper_setup+0xa9/0x330
[ 2904.895440]  call_usermodehelper_setup+0xa9/0x330
[ 2904.895455]  ? __pfx_free_modprobe_argv+0x10/0x10
[ 2904.895467]  ? __asan_memcpy+0x3d/0x60
[ 2904.895488]  ? ctrl_getfamily+0x1db/0x540
[ 2904.895504]  __request_module+0x385/0x630
[ 2904.895516]  ? __pfx___request_module+0x10/0x10
[ 2904.895530]  ? __mutex_unlock_slowpath+0x157/0x650
[ 2904.895552]  ? __up_read+0x197/0x750
[ 2904.895572]  ? __pfx___up_read+0x10/0x10
[ 2904.895593]  ctrl_getfamily+0x1db/0x540
[ 2904.895609]  ? __pfx_ctrl_getfamily+0x10/0x10
[ 2904.895625]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bc/0x290
[ 2904.895642]  ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290
[ 2904.895663]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2904.895680]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2904.895708]  ? __radix_tree_lookup+0x1f7/0x290
[ 2904.895729]  genl_rcv_msg+0x532/0x7e0
[ 2904.895749]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2904.895765]  ? __pfx_ctrl_getfamily+0x10/0x10
[ 2904.895785]  ? __lock_acquire+0x694/0x1b70
[ 2904.895801]  netlink_rcv_skb+0x147/0x430
[ 2904.895815]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2904.895832]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2904.895854]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2904.895866]  ? is_vmalloc_addr+0x86/0xa0
[ 2904.895887]  genl_rcv+0x28/0x40
[ 2904.895900]  netlink_unicast+0x58d/0x850
[ 2904.895917]  ? __pfx_netlink_unicast+0x10/0x10
[ 2904.895936]  netlink_sendmsg+0x8ac/0xd80
[ 2904.895954]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2904.895975]  __sys_sendto+0x506/0x570
[ 2904.895990]  ? __pfx___sys_sendto+0x10/0x10
[ 2904.896008]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2904.896033]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2904.896054]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2904.896074]  ? ksys_write+0x1a3/0x240
[ 2904.896095]  ? __pfx_ksys_write+0x10/0x10
[ 2904.896116]  __x64_sys_sendto+0xe1/0x1c0
[ 2904.896127]  ? do_syscall_64+0x85/0x360
[ 2904.896148]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 2904.896167]  do_syscall_64+0xbf/0x360
[ 2904.896186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2904.896199] RIP: 0033:0x7f35d85b18ac
[ 2904.896209] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2904.896221] RSP: 002b:00007f35d5b73020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2904.896233] RAX: ffffffffffffffda RBX: 00007f35d5b73110 RCX: 00007f35d85b18ac
[ 2904.896242] RDX: 0000000000000020 RSI: 00007f35d5b73160 RDI: 0000000000000003
[ 2904.896250] RBP: 0000000000000000 R08: 00007f35d5b73074 R09: 000000000000000c
[ 2904.896258] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f35d5b730c8
[ 2904.896265] R13: 00007f35d5b73160 R14: 0000000000000003 R15: 0000000000000000
[ 2904.896283]  </TASK>
[ 2904.940033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2904.963156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2904.979671] FAULT_INJECTION: forcing a failure.
[ 2904.979671] name failslab, interval 1, probability 0, space 0, times 0
[ 2904.980739] CPU: 1 UID: 0 PID: 256968 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2904.980757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2904.980765] Call Trace:
[ 2904.980770]  <TASK>
[ 2904.980776]  dump_stack_lvl+0xfa/0x120
[ 2904.980801]  should_fail_ex+0x4d7/0x5e0
[ 2904.980820]  should_failslab+0xc2/0x120
[ 2904.980834]  __kmalloc_cache_noprof+0x73/0x470
[ 2904.980852]  ? __pfx___cfg80211_rdev_from_attrs+0x10/0x10
[ 2904.980878]  ? nl80211_register_beacons+0xc6/0x390
[ 2904.980900]  ? __nla_parse+0x42/0x60
[ 2904.980918]  ? nl80211_register_beacons+0xc6/0x390
[ 2904.980934]  nl80211_register_beacons+0xc6/0x390
[ 2904.980956]  genl_family_rcv_msg_doit+0x1fe/0x2f0
[ 2904.980977]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 2904.981000]  ? security_capable+0x2f/0x90
[ 2904.981021]  ? ns_capable+0xe2/0x120
[ 2904.981041]  genl_rcv_msg+0x532/0x7e0
[ 2904.981059]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2904.981076]  ? __pfx_nl80211_pre_doit+0x10/0x10
[ 2904.981091]  ? __pfx_nl80211_register_beacons+0x10/0x10
[ 2904.981107]  ? __pfx_nl80211_post_doit+0x10/0x10
[ 2904.981132]  ? __lock_acquire+0x694/0x1b70
[ 2904.981149]  netlink_rcv_skb+0x147/0x430
[ 2904.981164]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2904.981181]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2904.981204]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2904.981217]  ? is_vmalloc_addr+0x86/0xa0
[ 2904.981237]  genl_rcv+0x28/0x40
[ 2904.981251]  netlink_unicast+0x58d/0x850
[ 2904.981268]  ? __pfx_netlink_unicast+0x10/0x10
[ 2904.981288]  netlink_sendmsg+0x8ac/0xd80
[ 2904.981306]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2904.981328]  ____sys_sendmsg+0xa67/0xc20
[ 2904.981348]  ? copy_msghdr_from_user+0xfb/0x150
[ 2904.981362]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2904.981386]  ? lock_acquire+0x15e/0x2f0
[ 2904.981402]  ___sys_sendmsg+0x10f/0x1b0
[ 2904.981417]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2904.981434]  ? proc_fail_nth_write+0x98/0x250
[ 2904.981458]  ? lock_acquire+0x15e/0x2f0
[ 2904.981470]  ? __fget_files+0x34/0x3b0
[ 2904.981489]  ? find_held_lock+0x2b/0x80
[ 2904.981507]  ? __fget_files+0x203/0x3b0
[ 2904.981524]  ? lock_release+0xc8/0x290
[ 2904.981541]  ? __fget_files+0x20d/0x3b0
[ 2904.981565]  __sys_sendmsg+0x150/0x200
[ 2904.981578]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2904.981599]  ? __pfx_ksys_write+0x10/0x10
[ 2904.981626]  do_syscall_64+0xbf/0x360
[ 2904.981649]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2904.981662] RIP: 0033:0x7f9747b96b19
[ 2904.981672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2904.981684] RSP: 002b:00007f974510c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2904.981697] RAX: ffffffffffffffda RBX: 00007f9747ca9f60 RCX: 00007f9747b96b19
[ 2904.981709] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[ 2904.981717] RBP: 00007f974510c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2904.981725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2904.981732] R13: 00007ffd5d9f4bbf R14: 00007f974510c300 R15: 0000000000022000
[ 2904.981752]  </TASK>
[ 2905.013449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2905.278293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2907.384460] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2907.387389] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2907.389199] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2907.400413] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2907.403627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2907.455151] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2907.461393] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2907.464140] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2907.474879] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2907.480429] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2909.422843] Bluetooth: hci2: command tx timeout
[ 2909.550769] Bluetooth: hci6: command tx timeout
[ 2911.470769] Bluetooth: hci2: command tx timeout
[ 2911.598803] Bluetooth: hci6: command tx timeout
[ 2913.518803] Bluetooth: hci2: command tx timeout
[ 2913.646791] Bluetooth: hci6: command tx timeout
[ 2915.566851] Bluetooth: hci2: command tx timeout
[ 2915.694273] Bluetooth: hci6: command tx timeout
[ 2918.827891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2918.828535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2918.897794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2918.898418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2918.949229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2918.950129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2919.018810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2919.019458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2919.153715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2919.209932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2919.217374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2928.176180] Bluetooth: hci3: command 0x0406 tx timeout
03:51:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 14)

03:51:55 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x7, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:51:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:51:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) (fail_nth: 10)

03:51:55 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

03:51:55 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:51:55 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x30}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:51:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
splice(0xffffffffffffffff, &(0x7f00000002c0)=0x8, r0, &(0x7f0000000440)=0x3, 0x7f, 0x7)

[ 2931.134407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2931.138189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2931.148585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2931.150478] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2931.160021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2931.173480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:51:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
splice(0xffffffffffffffff, &(0x7f00000002c0)=0x8, r0, &(0x7f0000000440)=0x3, 0x7f, 0x7)

03:51:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) (fail_nth: 11)

03:51:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
splice(0xffffffffffffffff, &(0x7f00000002c0)=0x8, r0, &(0x7f0000000440)=0x3, 0x7f, 0x7)

03:51:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0) (fail_nth: 12)

03:51:55 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
splice(0xffffffffffffffff, &(0x7f00000002c0)=0x8, r0, &(0x7f0000000440)=0x3, 0x7f, 0x7)

03:51:55 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 15)

[ 2931.334733] FAULT_INJECTION: forcing a failure.
[ 2931.334733] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2931.336318] CPU: 1 UID: 0 PID: 258111 Comm: syz-executor.0 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2931.336339] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2931.336349] Call Trace:
[ 2931.336355]  <TASK>
[ 2931.336361]  dump_stack_lvl+0xfa/0x120
[ 2931.336390]  should_fail_ex+0x4d7/0x5e0
[ 2931.336412]  _copy_from_user+0x30/0xd0
[ 2931.336436]  kstrtouint_from_user+0xbd/0x180
[ 2931.336451]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 2931.336467]  ? __lock_acquire+0xc65/0x1b70
[ 2931.336498]  proc_fail_nth_write+0x7c/0x250
[ 2931.336523]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2931.336548]  ? lock_is_held_type+0x9e/0x120
[ 2931.336574]  vfs_write+0x2b7/0x10c0
[ 2931.336597]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2931.336624]  ? __pfx_vfs_write+0x10/0x10
[ 2931.336649]  ? lock_release+0xc8/0x290
[ 2931.336669]  ? __fget_files+0x20d/0x3b0
[ 2931.336705]  ksys_write+0x121/0x240
[ 2931.336728]  ? __pfx_ksys_write+0x10/0x10
[ 2931.336759]  do_syscall_64+0xbf/0x360
[ 2931.336786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2931.336802] RIP: 0033:0x7f9747b495ff
[ 2931.336814] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48
[ 2931.336829] RSP: 002b:00007f974510c170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2931.336845] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9747b495ff
[ 2931.336856] RDX: 0000000000000001 RSI: 00007f974510c1e0 RDI: 0000000000000006
[ 2931.336865] RBP: 00007f974510c1d0 R08: 0000000000000000 R09: 0000000000000000
[ 2931.336875] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[ 2931.336885] R13: 00007ffd5d9f4bbf R14: 00007f974510c300 R15: 0000000000022000
[ 2931.336908]  </TASK>
03:51:55 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf257700000008000300f16f0fdbb754c46c9466ae4e365849e84098fe0f16ba9d8b47dbb11cfa3034b900f084bb45ad88401dd9c0dc1eb55e31056afe39788a46d9f1f5156dd856cd259056d6297621535c3293c8606c272a81b7b3061b9f41811918d410d010591c8dcba005f044cd033915b34d52862e14a523da8564fb5fcfb5731c869a7d2ed7117c003602dfb464932212ef06b997ad9865a74feead7406d98689917408722c0a943d24f1e4a029aa1a9ad28531093f7789f1b1616c9fb5c4d83b02eaa8cff32d6de37a34fd2885a086442b8ea986780cfc30de30e9d7fceb6a7633d0e35df561", @ANYRES32, @ANYBLOB="0c00990001100000620000000800ef000a000000020000007f000000cd00070000000500ee00ff000040e893a0dd3523fac1fa034e9a9561ecc0128ba2ca49"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r4, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:51:55 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

[ 2931.459577] FAULT_INJECTION: forcing a failure.
[ 2931.459577] name failslab, interval 1, probability 0, space 0, times 0
[ 2931.461203] CPU: 0 UID: 0 PID: 258117 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2931.461228] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2931.461239] Call Trace:
[ 2931.461245]  <TASK>
[ 2931.461252]  dump_stack_lvl+0xfa/0x120
[ 2931.461285]  should_fail_ex+0x4d7/0x5e0
[ 2931.461310]  should_failslab+0xc2/0x120
[ 2931.461329]  kmem_cache_alloc_node_noprof+0x71/0x470
[ 2931.461356]  ? __alloc_skb+0x2ab/0x370
[ 2931.461381]  __alloc_skb+0x2ab/0x370
[ 2931.461400]  ? __pfx___alloc_skb+0x10/0x10
[ 2931.461430]  netlink_ack+0x167/0xbf0
[ 2931.461462]  netlink_rcv_skb+0x344/0x430
[ 2931.461482]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 2931.461507]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2931.461540]  ? netlink_deliver_tap+0x1ae/0xce0
[ 2931.461558]  ? is_vmalloc_addr+0x86/0xa0
[ 2931.461587]  genl_rcv+0x28/0x40
[ 2931.461606]  netlink_unicast+0x58d/0x850
[ 2931.461631]  ? __pfx_netlink_unicast+0x10/0x10
[ 2931.461660]  netlink_sendmsg+0x8ac/0xd80
[ 2931.461685]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2931.461724]  __sys_sendto+0x506/0x570
[ 2931.461744]  ? __pfx___sys_sendto+0x10/0x10
[ 2931.461771]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2931.461809]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2931.461837]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2931.461866]  ? ksys_write+0x1a3/0x240
[ 2931.461894]  ? __pfx_ksys_write+0x10/0x10
[ 2931.461925]  __x64_sys_sendto+0xe1/0x1c0
[ 2931.461941]  ? do_syscall_64+0x85/0x360
[ 2931.461967]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 2931.461996]  do_syscall_64+0xbf/0x360
[ 2931.462023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2931.462042] RIP: 0033:0x7f35d85b18ac
[ 2931.462056] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b
[ 2931.462074] RSP: 002b:00007f35d5b73020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[ 2931.462092] RAX: ffffffffffffffda RBX: 00007f35d5b73110 RCX: 00007f35d85b18ac
[ 2931.462104] RDX: 0000000000000020 RSI: 00007f35d5b73160 RDI: 0000000000000003
[ 2931.462115] RBP: 0000000000000000 R08: 00007f35d5b73074 R09: 000000000000000c
[ 2931.462126] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f35d5b730c8
[ 2931.462137] R13: 00007f35d5b73160 R14: 0000000000000003 R15: 0000000000000000
[ 2931.462163]  </TASK>
[ 2931.508286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2931.514532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 16)

03:52:03 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:52:03 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
splice(0xffffffffffffffff, &(0x7f00000002c0)=0x8, r0, &(0x7f0000000440)=0x3, 0x7f, 0x7)

03:52:03 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:52:03 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0x0, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:52:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r3, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:52:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:52:03 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

[ 2939.028518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2939.040528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2939.043263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:52:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 17)

[ 2939.069542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2939.076762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2939.086191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:03 executing program 5:
splice(0xffffffffffffffff, &(0x7f00000002c0)=0x8, 0xffffffffffffffff, &(0x7f0000000440)=0x3, 0x7f, 0x7)

03:52:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:52:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 18)

03:52:03 executing program 5:
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000440)=0x3, 0x7f, 0x7)

03:52:03 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:52:03 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x20044000)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r3, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2939.354112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2939.397309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2939.403181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:13 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r3, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:52:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 19)

03:52:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:52:13 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x9, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:52:13 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

03:52:13 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:52:13 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0x0, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:52:13 executing program 5:
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0x7)

[ 2949.878887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2949.892791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2949.910699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:13 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x6, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:52:13 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r3)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

[ 2949.921369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:14 executing program 5:
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7)

[ 2949.960696] FAULT_INJECTION: forcing a failure.
[ 2949.960696] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2949.962243] CPU: 0 UID: 0 PID: 258389 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2949.962261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2949.962269] Call Trace:
[ 2949.962274]  <TASK>
[ 2949.962280]  dump_stack_lvl+0xfa/0x120
[ 2949.962309]  should_fail_ex+0x4d7/0x5e0
[ 2949.962327]  _copy_to_iter+0x1dc/0x15b0
[ 2949.962345]  ? lock_acquire+0x15e/0x2f0
[ 2949.962360]  ? __virt_addr_valid+0x1c6/0x5d0
[ 2949.962380]  ? find_held_lock+0x2b/0x80
[ 2949.962399]  ? __pfx__copy_to_iter+0x10/0x10
[ 2949.962415]  ? lock_release+0xc8/0x290
[ 2949.962431]  ? __virt_addr_valid+0x100/0x5d0
[ 2949.962450]  ? __check_object_size+0x57b/0x880
[ 2949.962471]  simple_copy_to_iter+0x5c/0x80
[ 2949.962492]  __skb_datagram_iter+0x125/0x910
[ 2949.962510]  ? __pfx_simple_copy_to_iter+0x10/0x10
[ 2949.962531]  ? skb_recv_datagram+0x88/0xc0
[ 2949.962553]  skb_copy_datagram_iter+0x89/0x1f0
[ 2949.962573]  netlink_recvmsg+0x1ef/0x9e0
[ 2949.962589]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 2949.962601]  ? find_held_lock+0x2b/0x80
[ 2949.962618]  ? __fget_files+0x203/0x3b0
[ 2949.962637]  ? lock_release+0xc8/0x290
[ 2949.962659]  sock_recvmsg+0x1e1/0x240
[ 2949.962678]  __sys_recvfrom+0x1f9/0x310
[ 2949.962693]  ? __pfx___sys_recvfrom+0x10/0x10
[ 2949.962726]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2949.962747]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2949.962767]  ? ksys_write+0x1a3/0x240
[ 2949.962785]  ? xfd_validate_state+0x55/0x180
[ 2949.962803]  ? __pfx_ksys_write+0x10/0x10
[ 2949.962824]  __x64_sys_recvfrom+0xe1/0x1c0
[ 2949.962837]  ? do_syscall_64+0x85/0x360
[ 2949.962855]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 2949.962875]  do_syscall_64+0xbf/0x360
[ 2949.962896]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2949.962911] RIP: 0033:0x7f35d85b17e4
[ 2949.962922] Code: 89 4c 24 1c e8 bd fb ff ff 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 e9 fb ff ff 48 8b 04
[ 2949.962935] RSP: 002b:00007f35d5b73030 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[ 2949.962948] RAX: ffffffffffffffda RBX: 00007f35d5b73110 RCX: 00007f35d85b17e4
[ 2949.962956] RDX: 0000000000001000 RSI: 00007f35d5b73160 RDI: 0000000000000003
[ 2949.962964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2949.962972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f35d5b730c8
[ 2949.962980] R13: 00007f35d5b73160 R14: 0000000000000003 R15: 0000000000000000
[ 2949.962998]  </TASK>
03:52:14 executing program 6:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r1)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

[ 2950.002521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 20)

03:52:14 executing program 5:
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7)

03:52:14 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x7, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:52:14 executing program 6:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

[ 2950.083878] FAULT_INJECTION: forcing a failure.
[ 2950.083878] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2950.084801] CPU: 0 UID: 0 PID: 258403 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2950.084817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2950.084825] Call Trace:
[ 2950.084830]  <TASK>
[ 2950.084835]  dump_stack_lvl+0xfa/0x120
[ 2950.084860]  should_fail_ex+0x4d7/0x5e0
[ 2950.084878]  _copy_to_iter+0x1dc/0x15b0
[ 2950.084896]  ? lock_acquire+0x15e/0x2f0
[ 2950.084911]  ? __virt_addr_valid+0x1c6/0x5d0
[ 2950.084930]  ? find_held_lock+0x2b/0x80
[ 2950.084949]  ? __pfx__copy_to_iter+0x10/0x10
[ 2950.084964]  ? lock_release+0xc8/0x290
[ 2950.084980]  ? __virt_addr_valid+0x100/0x5d0
[ 2950.084998]  ? __check_object_size+0x57b/0x880
[ 2950.085019]  simple_copy_to_iter+0x5c/0x80
[ 2950.085041]  __skb_datagram_iter+0x125/0x910
[ 2950.085058]  ? __pfx_simple_copy_to_iter+0x10/0x10
[ 2950.085079]  ? skb_recv_datagram+0x88/0xc0
[ 2950.085100]  skb_copy_datagram_iter+0x89/0x1f0
[ 2950.085121]  netlink_recvmsg+0x1ef/0x9e0
[ 2950.085136]  ? __pfx_netlink_recvmsg+0x10/0x10
[ 2950.085149]  ? find_held_lock+0x2b/0x80
[ 2950.085165]  ? __fget_files+0x203/0x3b0
[ 2950.085183]  ? lock_release+0xc8/0x290
[ 2950.085204]  sock_recvmsg+0x1e1/0x240
[ 2950.085223]  __sys_recvfrom+0x1f9/0x310
[ 2950.085237]  ? __pfx___sys_recvfrom+0x10/0x10
[ 2950.085265]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2950.085285]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[ 2950.085305]  ? ksys_write+0x1a3/0x240
[ 2950.085323]  ? xfd_validate_state+0x55/0x180
[ 2950.085348]  ? __pfx_ksys_write+0x10/0x10
[ 2950.085369]  __x64_sys_recvfrom+0xe1/0x1c0
[ 2950.085381]  ? do_syscall_64+0x85/0x360
[ 2950.085399]  ? trace_irq_enable.constprop.0+0xc2/0x100
[ 2950.085419]  do_syscall_64+0xbf/0x360
[ 2950.085438]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2950.085451] RIP: 0033:0x7f35d85b17e4
[ 2950.085461] Code: 89 4c 24 1c e8 bd fb ff ff 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 e9 fb ff ff 48 8b 04
[ 2950.085473] RSP: 002b:00007f35d5b73090 EFLAGS: 00000246 ORIG_RAX: 000000000000002d
[ 2950.085486] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f35d85b17e4
[ 2950.085494] RDX: 0000000000001000 RSI: 00007f35d5b73160 RDI: 0000000000000003
[ 2950.085502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2950.085509] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200007c0
[ 2950.085517] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000022000
[ 2950.085534]  </TASK>
03:52:14 executing program 6:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

[ 2950.200670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2950.206304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0) (fail_nth: 21)

03:52:25 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r3, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

03:52:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

03:52:25 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:52:25 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0xb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:52:25 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0x0, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:52:25 executing program 5:
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7)

03:52:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x8, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

[ 2961.522326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2961.523435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2961.536875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2961.544191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2961.578689] FAULT_INJECTION: forcing a failure.
[ 2961.578689] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2961.580658] CPU: 0 UID: 0 PID: 258430 Comm: syz-executor.1 Not tainted 6.16.0-rc6-next-20250714 #1 PREEMPT(voluntary) 
[ 2961.580699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2961.580722] Call Trace:
[ 2961.580731]  <TASK>
[ 2961.580740]  dump_stack_lvl+0xfa/0x120
[ 2961.580780]  should_fail_ex+0x4d7/0x5e0
[ 2961.580812]  _copy_to_user+0x32/0xd0
[ 2961.580846]  simple_read_from_buffer+0xe0/0x180
[ 2961.580881]  proc_fail_nth_read+0x189/0x270
[ 2961.580919]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2961.580956]  ? security_file_permission+0x22/0x90
[ 2961.580985]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2961.581021]  vfs_read+0x1eb/0xbe0
[ 2961.581061]  ? __pfx_vfs_read+0x10/0x10
[ 2961.581096]  ? lock_release+0xc8/0x290
[ 2961.581128]  ? __fget_files+0x20d/0x3b0
[ 2961.581173]  ksys_read+0x121/0x240
[ 2961.581207]  ? __pfx_ksys_read+0x10/0x10
[ 2961.581252]  do_syscall_64+0xbf/0x360
[ 2961.581289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2961.581312] RIP: 0033:0x7f35d85b169c
[ 2961.581331] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 2961.581353] RSP: 002b:00007f35d5b74170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2961.581375] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f35d85b169c
[ 2961.581391] RDX: 000000000000000f RSI: 00007f35d5b741e0 RDI: 0000000000000004
[ 2961.581405] RBP: 00007f35d5b741d0 R08: 0000000000000000 R09: 0000000000000000
[ 2961.581419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 2961.581432] R13: 00007fffe0782d4f R14: 00007f35d5b74300 R15: 0000000000022000
[ 2961.581480]  </TASK>
[ 2961.604709] hpet: Lost 1 RTC interrupts
03:52:25 executing program 5:
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7f, 0x0)

[ 2961.638223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x9, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:52:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:52:25 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:52:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:52:25 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

[ 2961.770919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2961.778572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2961.861118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

03:52:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="b398e9a4daf65089bc69fc56e26cd21004d514c2132bbc66f5999e68ccce92b97f2e798fe4421bb1887a1dbda896e1e9c3d0d349a041fdaeb49b7fa615087a93c060a51da4d53a9618e67a74cfdb27e44abde73805b323a491a2f94d893ca39f39f40f0962596ef5cc315df92561f9b4d2033b1f544c1f14df8f2db3ee5e873934df8628d8098f836c35c3a741c8e2c7a6c4bb1f2a5b929a9b880907c85efd784a19d837e75a06d468eeb540170c277e09389b60665b9e0732fb142af193edab8ef4eeb390c6814c5535"], 0x1c}}, 0x0)
r1 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000640)={0x7}, 0x7)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xea, 0x37}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000010}, 0x40004)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x2c, 0x1, 0x7, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x386}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x2004400d)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000001f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01fb6bfcff000000000002"], 0x18}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', <r6=>0x0, 0x4, 0x1, 0x1f, 0x5, 0x9, @dev={0xfe, 0x80, '\x00', 0x16}, @local, 0x7800, 0x13a8adcec929b76f, 0x6, 0xfff}})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x10c, r5, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4080}, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @random="3b97694e6316"}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)={0x38, r8, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x101, 0xd}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x51}, @NL80211_ATTR_DURATION={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8910}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r0)

03:52:36 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

03:52:36 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x34}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0x1, 0x2, 0x69, 0x41}}}, 0x3f)

03:52:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x9c, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:52:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

03:52:36 executing program 7:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0xf, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)

03:52:36 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000001c0)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000800000000000000000640001000006020202020202010882848b960c12182406025f1d"], 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x71}, @val={0x8}, @val={0xc, 0x99, {0x0, 0x49}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4094)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="65930d01000000fe00000000000800000008000300", @ANYRES32=r3, @ANYBLOB="0526520111000000080026006c09000005001901070000000a197aa835200018000303030303030000"], 0x40}}, 0x0)

[ 2972.657626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:52:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x36, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

[ 2972.719547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2972.723286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2972.738233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:36 executing program 6:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}}, 0x0)

[ 2972.779297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
03:52:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

03:52:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

03:52:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000200", @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0)
r1 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000640)={0x7}, 0x7)
openat2(r1, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)={0x80000, 0x80, 0x8}, 0x18)
r2 = creat(&(0x7f0000000040)='./file0/file0\x00', 0x0)
write$P9_RSETATTR(r2, &(0x7f0000000640)={0x7}, 0x7)
syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r1)

03:52:36 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x6, 0xf8}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x24}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xfd}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000040}, 0x800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x320, 0x70bd27, 0x25dfdc00, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4041)

03:52:36 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x7}}}}}, 0x28}}, 0x0)

[ 2973.072596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2975.672327] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 2975.675061] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 2975.677394] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 2975.684569] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 2975.687249] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 2977.709861] Bluetooth: hci5: command tx timeout
[ 2979.757954] Bluetooth: hci5: command tx timeout
[ 2981.805885] Bluetooth: hci5: command tx timeout
[ 2983.853839] Bluetooth: hci5: command tx timeout
[ 2994.432351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2994.433802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2994.488085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2994.489179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2994.833385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2994.844855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 3004.708474] kmemleak: 6 new suspected memory leaks (see /sys/kernel/debug/kmemleak)
BUG: memory leak
unreferenced object 0xffff8880396fda00 (size 184):
  comm "syz-fuzzer", pid 9151, jiffies 4294853364
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
  backtrace (crc aec92a1f):
    kmem_cache_alloc_noprof+0x397/0x470
    prepare_creds+0x2c/0x7e0
    prepare_exec_creds+0x11/0x260
    bprm_execve+0xbf/0x15a0
    do_execveat_common+0x5b2/0x770
    __x64_sys_execve+0x95/0xc0
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff88800fc75f00 (size 128):
  comm "syz-fuzzer", pid 9151, jiffies 4294853364
  hex dump (first 32 bytes):
    01 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00  ................
    00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00  ................
  backtrace (crc 4c279fa3):
    __kmalloc_noprof+0x37c/0x4b0
    security_prepare_creds+0x101/0x160
    prepare_creds+0x579/0x7e0
    prepare_exec_creds+0x11/0x260
    bprm_execve+0xbf/0x15a0
    do_execveat_common+0x5b2/0x770
    __x64_sys_execve+0x95/0xc0
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff888016185c00 (size 360):
  comm "syz-executor.5", pid 9151, jiffies 4294853492
  hex dump (first 32 bytes):
    00 00 00 00 ad 4e ad de ff ff ff ff 00 00 00 00  .....N..........
    ff ff ff ff ff ff ff ff e0 3e 6e 88 ff ff ff ff  .........>n.....
  backtrace (crc 7c70b130):
    kmem_cache_alloc_noprof+0x397/0x470
    alloc_empty_file+0x58/0x1e0
    path_openat+0xe0/0x2880
    do_filp_open+0x1e8/0x450
    do_sys_openat2+0x104/0x1b0
    __x64_sys_openat+0x142/0x200
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff888009d2e160 (size 16):
  comm "syz-executor.5", pid 9151, jiffies 4294853492
  hex dump (first 16 bytes):
    01 00 00 00 01 00 00 00 23 00 00 00 01 00 00 00  ........#.......
  backtrace (crc fa88df2e):
    kmem_cache_alloc_noprof+0x397/0x470
    security_file_alloc+0x35/0x130
    init_file+0x95/0x4c0
    alloc_empty_file+0x76/0x1e0
    path_openat+0xe0/0x2880
    do_filp_open+0x1e8/0x450
    do_sys_openat2+0x104/0x1b0
    __x64_sys_openat+0x142/0x200
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffff8880375dc600 (size 128):
  comm "syz-executor.5", pid 9151, jiffies 4294853492
  hex dump (first 32 bytes):
    01 00 00 00 00 00 00 00 00 00 00 00 ad 4e ad de  .............N..
    ff ff ff ff 00 00 00 00 ff ff ff ff ff ff ff ff  ................
  backtrace (crc e95075e):
    __kmalloc_cache_noprof+0x3ad/0x470
    kcov_open+0x24/0x80
    open_proxy_open+0x2bc/0x340
    do_dentry_open+0x71c/0x1420
    vfs_open+0x82/0x3f0
    path_openat+0x1c3f/0x2880
    do_filp_open+0x1e8/0x450
    do_sys_openat2+0x104/0x1b0
    __x64_sys_openat+0x142/0x200
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: memory leak
unreferenced object 0xffffc900143b6000 (size 2097152):
  comm "syz-executor.5", pid 9151, jiffies 4294853492
  hex dump (first 32 bytes):
    00 00 00 00 00 00 00 00 09 b1 47 84 ff ff ff ff  ..........G.....
    f1 d4 3d 84 ff ff ff ff 40 d5 3d 84 ff ff ff ff  ..=.....@.=.....
  backtrace (crc 44c0d65c):
    kmemleak_vmalloc+0x2d/0xa0
    __vmalloc_node_range_noprof+0x121d/0x13e0
    vmalloc_user_noprof+0x9e/0xe0
    kcov_ioctl+0x4c/0x6c0
    __x64_sys_ioctl+0x18f/0x210
    do_syscall_64+0xbf/0x360
    entry_SYSCALL_64_after_hwframe+0x77/0x7f

BUG: leak checking failed

VM DIAGNOSIS:
10:13:47  Registers:
info registers vcpu 0
RAX=00000000012e1c25 RBX=0000000000000000 RCX=ffffffff84b8e167 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814c7874 RBP=dffffc0000000000 RSP=ffffffff85a07e00
R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001
R12=ffffffff8643a150 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84b8ce9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e55ea000 00000000 00000000
LDT=0000 ffffc90000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff25101040 CR3=000000001da88000 CR4=00350ef0
DR0=ffffffffffff7693 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=656a626f206465636e6572656665726e
XMM02=2934383120657a697328203030616466 XMM03=2c3135313920646970202c2272657a7a
XMM04=3030203030202020200a2e2e2e2e2e2e XMM05=30203030203030203030203030203030
XMM06=3030203030203030203130202020200a XMM07=2820706d75642078656820200a343633
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000001519dd9 RBX=0000000000000001 RCX=ffffffff84b8e167 RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff814c7874 RBP=dffffc0000000000 RSP=ffff888009717e58
R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001
R12=ffffffff8643a150 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff84b8ce9e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff8880e56ea000 00000000 00000000
LDT=0000 ffffc90000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6a27ffd020 CR3=000000001d941000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000
XMM02=0000000000000000416ab38200000000 XMM03=0000ff00000000000000000000000000
XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962
XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000